Исследование антивирусов 7

Printable View

Показывать 40 сообщений этой темы на одной странице

05.11.2008, 14:07
Shu_b

Исследование антивирусов 7

[quote]
Сообщение от [B]Geser[/B] [URL="http://virusinfo.info/showthread.php?p=75585#post75585"][IMG]http://virusinfo.info/images/buttonsru/viewpost.gif[/IMG][/URL]
[B][I]В общем думал я думал как сделать более-менее объективную оценку антивирусов, и кое что придумал. Вот в эту тему прошу всех постить результаты проверки зверей которые были пойманы исключительно ручками. Т.е. которых не видел установленный на компютере антивирус. Так выборка будет по настоящему случайной.[/I]

[I][COLOR=red]Постить в эту тему результаты проверки файлов исключительно пойманных руками на компьютерах.[/COLOR][/I]

[I][COLOR=blue][B]Не[/B] постить результаты проверки файлов найденных на других сайтах или в коллекциях. [/COLOR][/I]
[I][COLOR=blue][B]Не[/B] постить результаты проверки файлов изначально найденных антивирусом.[/COLOR][/I][/B]
[/quote]

Продолжим в новой теме.

[size="1"][color="#666686"][B][I]Добавлено через 4 часа 40 минут[/I][/B][/color][/size]

Для затравки: [CODE]File svchost.exe:ext.exe:$DATA received on 11.05.2008 12:03:13 (CET)
Antivirus Version Last Update Result
AhnLab-V3 2008.11.5.3 2008.11.05 -
[B]AntiVir 7.9.0.10 2008.11.05 TR/Crypt.U.Gen[/B]
Authentium 5.1.0.4 2008.11.04 -
[B]Avast 4.8.1248.0 2008.11.04 Win32:Agent-ABKC[/B]
AVG 8.0.0.161 2008.11.05 -
[B]BitDefender 7.2 2008.11.05 Trojan.Rootkit.Agent.NFS
CAT-QuickHeal 9.50 2008.11.04 Win32.Backdoor.Tofsee.F.3[/B]
ClamAV 0.94.1 2008.11.05 -
DrWeb 4.44.0.09170 2008.11.05 -
[B]eSafe 7.0.17.0 2008.11.04 Suspicious File[/B]
eTrust-Vet 31.6.6190 2008.11.05 -
Ewido 4.0 2008.11.04 -
F-Prot 4.4.4.56 2008.11.04 -
F-Secure 8.0.14332.0 2008.11.05 -
Fortinet 3.117.0.0 2008.11.05 -
[B]GData 19 2008.11.05 Trojan.Rootkit.Agent.NFS
Ikarus T3.1.1.45.0 2008.11.05 Virus.Win32.Agent.ABKC[/B]
K7AntiVirus 7.10.516 2008.11.04 -
Kaspersky 7.0.0.125 2008.11.05 -
[B]McAfee 5424 2008.11.04 New Malware.bm[/B]
Microsoft 1.4005 2008.11.05 -
NOD32 3585 2008.11.05 -
Norman 5.80.02 2008.11.04 -
Panda 9.0.0.4 2008.11.05 -
PCTools 4.4.2.0 2008.11.04 -
Prevx1 V2 2008.11.05 -
[B]Rising 21.02.22.00 2008.11.05 Win32.Virut.GEN
SecureWeb-Gateway 6.7.6 2008.11.05 Trojan.Crypt.U.Gen[/B]
Sophos 4.35.0 2008.11.05 -
Sunbelt 3.1.1783.2 2008.11.05 -
Symantec 10 2008.11.05 -
TheHacker 6.3.1.1.140 2008.11.05 -
[B]TrendMicro 8.700.0.1004 2008.11.05 PAK_Generic.001[/B]
VBA32 3.12.8.9 2008.11.05 -
ViRobot 2008.11.5.1453 2008.11.05 -
VirusBuster 4.5.11.0 2008.11.04 -
Additional information
File size: 39936 bytes[/CODE]
06.11.2008, 16:07
Hanson

Файл avz00002.dta(C:\WINDOWS\system32\tvsm.dll) получен 2008.11.06 13:54:41 (CET)
Текущий статус:закончено
Результат: 1/36 (2.78%)
[QUOTE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.5.3 2008.11.06 -
AntiVir 7.9.0.26 2008.11.06 -
Authentium 5.1.0.4 2008.11.06 -
Avast 4.8.1248.0 2008.11.05 -
AVG 8.0.0.161 2008.11.06 -
BitDefender 7.2 2008.11.06 -
CAT-QuickHeal 9.50 2008.11.04 -
ClamAV 0.94.1 2008.11.06 -
DrWeb 4.44.0.09170 2008.11.06 -
eSafe 7.0.17.0 2008.11.05 -
eTrust-Vet 31.6.6194 2008.11.06 -
Ewido 4.0 2008.11.06 -
F-Prot 4.4.4.56 2008.11.06 -
F-Secure 8.0.14332.0 2008.11.06 -
Fortinet 3.117.0.0 2008.11.05 -
GData 19 2008.11.06 -
Ikarus T3.1.1.45.0 2008.11.06 -
K7AntiVirus 7.10.517 2008.11.05 -
Kaspersky 7.0.0.125 2008.11.06 Trojan-Ransom.Win32.BHO.a
McAfee 5425 2008.11.05 -
Microsoft 1.4005 2008.11.06 -
NOD32 3590 2008.11.06 -
Norman 5.80.02 2008.11.06 -
Panda 9.0.0.4 2008.11.05 -
PCTools 4.4.2.0 2008.11.06 -
Prevx1 V2 2008.11.06 -
Rising 21.02.32.00 2008.11.06 -
SecureWeb-Gateway 6.7.6 2008.11.06 -
Sophos 4.35.0 2008.11.06 -
Sunbelt 3.1.1783.2 2008.11.05 -
Symantec 10 2008.11.06 -
TheHacker 6.3.1.1.141 2008.11.05 -
TrendMicro 8.700.0.1004 2008.11.06 -
VBA32 3.12.8.9 2008.11.05 -
ViRobot 2008.11.6.1455 2008.11.06 -
VirusBuster 4.5.11.0 2008.11.05 -

Дополнительная информация
File size: 221184 bytes
MD5...: f9dc2a3052db20dfb8939a74e75314ed
SHA1..: fd936b597982f68d05d037773819d178d6706517
SHA256: a1e1a209a40dccc9848bf2b9029ba091cb3522c769e3a082761e277d534af1e1
SHA512: 3088346ac8f5f82f47abfadb2541e0e1e85dbe2db5cabcb13fd10d744123c8dd
9667ab1fffa8a1766a95e5717135239cb397db6dc26512ff4ccee0e87356f01c
PEiD..: -[/QUOTE]

может и ложняк,но вот ответ каспера
[QUOTE]avz00002.dta - Trojan-Ransom.Win32.BHO.a

This file is already detected. Please update your antivirus bases.[/QUOTE]

[size="1"][color="#666686"][B][I]Добавлено через 8 минут[/I][/B][/color][/size]

Файл avz00009.dta получен 2008.11.06 14:01:20 (CET)
(C:\windows\services.exe)
Текущий статус: закончено
Результат: 15/36 (41.67%)
[QUOTE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.5.3 2008.11.06 -
[B]AntiVir 7.9.0.26 2008.11.06 Worm/Joleee.CA[/B]
Authentium 5.1.0.4 2008.11.06 -
[B]Avast 4.8.1248.0 2008.11.05 Win32:Fabot
AVG 8.0.0.161 2008.11.06 Downloader.Generic_r.BG
BitDefender 7.2 2008.11.06 Trojan.Spammer.Tedroo.AT
CAT-QuickHeal 9.50 2008.11.04 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.11.06 -
DrWeb 4.44.0.09170 2008.11.06 -
eSafe 7.0.17.0 2008.11.05 -
eTrust-Vet 31.6.6194 2008.11.06 -
Ewido 4.0 2008.11.06 -
F-Prot 4.4.4.56 2008.11.06 -
[B]F-Secure 8.0.14332.0 2008.11.06 Email-Worm.Win32.Joleee.ca[/B]
Fortinet 3.117.0.0 2008.11.05 -
[B]GData 19 2008.11.06 Win32:Fabot
Ikarus T3.1.1.45.0 2008.11.06 Email-Worm.Win32.Joleee.ca[/B]
K7AntiVirus 7.10.517 2008.11.05 -
[B]Kaspersky 7.0.0.125 2008.11.06 Email-Worm.Win32.Joleee.ca[/B]
McAfee 5425 2008.11.05 -
[B]Microsoft 1.4005 2008.11.06 TrojanDropper:Win32/Cutwail.AR[/B]
NOD32 3590 2008.11.06 -
Norman 5.80.02 2008.11.06 -
Panda 9.0.0.4 2008.11.05 -
PCTools 4.4.2.0 2008.11.06 -
[B]Prevx1 V2 2008.11.06 System Back Door
Rising 21.02.32.00 2008.11.06 Trojan.Win32.Undef.smc
SecureWeb-Gateway 6.7.6 2008.11.06 Worm.Joleee.CA
Sophos 4.35.0 2008.11.06 W32/Jolly-A[/B]
Sunbelt 3.1.1783.2 2008.11.05 -
[B]Symantec 10 2008.11.06 Backdoor.Trojan[/B]
TheHacker 6.3.1.1.141 2008.11.05 -
TrendMicro 8.700.0.1004 2008.11.06 -
VBA32 3.12.8.9 2008.11.05 -
ViRobot 2008.11.6.1455 2008.11.06 -
VirusBuster 4.5.11.0 2008.11.05 -

File size: 40960 bytes
MD5...: 9d0528ae22b6e911b466ca74944f3013
SHA1..: e6c1466b2af413663b50e7461a55309dfdae0e86
SHA256: 810dd0f979c479b1eb494b87c454224ca02458bc501c8c6c6fb5a59362295dcb
SHA512: 749b25065d175ee5dc45678ff6700d0f13e2b7118aa1ea2d03e2ff95276c1dfa
cdc1565a88a722caf1f1721f190f8b817ff2f7874c117a9de7ddcb5240b4512c[/QUOTE]
08.11.2008, 08:27
ISO

Порно информер - надстройка в IE.
[CODE]Файл trdlib.dll получен 2008.11.07 01:20:05 (CET)
Результат: 6/36 (16.67%)
Антивирус Версия Обновление Результат
[B]AhnLab-V3 2008.11.7.1 2008.11.06 Win-Trojan/Hexzone.352256[/B]
AntiVir 7.9.0.26 2008.11.07 -
Authentium 5.1.0.4 2008.11.06 -
Avast 4.8.1248.0 2008.11.06 -
AVG 8.0.0.161 2008.11.07 -
BitDefender 7.2 2008.11.07 -
[B]CAT-QuickHeal 9.50 2008.11.04 TrojanRansom.Hexzone.abq[/B]
ClamAV 0.94.1 2008.11.07 -
[B]DrWeb 4.44.0.09170 2008.11.07 Trojan.Blackmailer.244[/B]
eSafe 7.0.17.0 2008.11.06 -
eTrust-Vet 31.6.6195 2008.11.06 -
Ewido 4.0 2008.11.06 -
F-Prot 4.4.4.56 2008.11.06 -
F-Secure 8.0.14332.0 2008.11.06 -
Fortinet 3.117.0.0 2008.11.06 -
GData 19 2008.11.07 -
Ikarus T3.1.1.45.0 2008.11.06 -
K7AntiVirus 7.10.518 2008.11.06 -
Kaspersky 7.0.0.125 2008.11.07 -
McAfee 5426 2008.11.06 -
[B]Microsoft 1.4104 2008.11.07 Trojan:Win32/Hexzone.A!dll
NOD32 3592 2008.11.06 Win32/Hexzone.I[/B]
Norman 5.80.02 2008.11.06 -
Panda 9.0.0.4 2008.11.06 -
PCTools 4.4.2.0 2008.11.06 -
[B]Prevx1 V2 2008.11.07 Fraudulent Security Program[/B]
Rising 21.02.32.00 2008.11.06 -
SecureWeb-Gateway 6.7.6 2008.11.06 -
Sophos 4.35.0 2008.11.07 -
Sunbelt 3.1.1783.2 2008.11.05 -
Symantec 10 2008.11.07 -
TheHacker 6.3.1.1.143 2008.11.07 -
TrendMicro 8.700.0.1004 2008.11.06 -
VBA32 3.12.8.9 2008.11.06 -
ViRobot 2008.11.6.1455 2008.11.06 -
VirusBuster 4.5.11.0 2008.11.06 -
Дополнительная информация
File size: 352256 bytes
MD5...: 9d175e378ad55e55c2637c4ded6d749e
SHA1..: 21da44fc2dd8541188d3a21ba4b0875b69edd6ac
SHA256: 6e85aceb0b90726d1032ed98ccfdc3508010936a7a621822d20c068264b6935d
SHA512: 1151b5faadc673f55281c275f0fdd34753025bed1e660b67c9b473143559c469
673b61f87fdae496cc99aa7c5af0982e5a5020354d10b8287569d3826a580300
PEiD..: -[/CODE]
11.11.2008, 13:27
Hanson

Файл csrss5.dll получен 2008.11.11 10:28:26 (CET)
Текущий статус:закончено
Результат: 12/36 (33.34%)
[QUOTE]
Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.11.0 2008.11.10 -
[B]AntiVir 7.9.0.29 2008.11.11 TR/Agent.rnn[/B]
Authentium 5.1.0.4 2008.11.11 -
[B]Avast 4.8.1248.0 2008.11.10 Win32:Trojan-gen {Other}[/B]
AVG 8.0.0.161 2008.11.11 -
[B]BitDefender 7.2 2008.11.11 Trojan.Generic.752223[/B]
CAT-QuickHeal 9.50 2008.11.11 -
ClamAV 0.94.1 2008.11.11 -
DrWeb 4.44.0.09170 2008.11.11 -
[B]eSafe 7.0.17.0 2008.11.10 Suspicious File[/B]
eTrust-Vet 31.6.6203 2008.11.11 -
Ewido 4.0 2008.11.10 -
F-Prot 4.4.4.56 2008.11.10 -
F-Secure 8.0.14332.0 2008.11.11 -
Fortinet 3.117.0.0 2008.11.11 -
[B]GData 19 2008.11.11 Trojan.Generic.752223
Ikarus T3.1.1.45.0 2008.11.11 Virus.Win32.Trojan
K7AntiVirus 7.10.521 2008.11.10 Trojan.Win32.Malware.1[/B]
Kaspersky 7.0.0.125 2008.11.11 -
McAfee 5430 2008.11.10 -
Microsoft 1.4104 2008.11.11 -
NOD32 3601 2008.11.11 -
Norman 5.80.02 2008.11.10 -
[B]Panda 9.0.0.4 2008.11.10 Generic Trojan[/B]
PCTools 4.4.2.0 2008.11.10 -
Prevx1 V2 2008.11.11 Worm
Rising 21.03.11.00 2008.11.11 -
[B]SecureWeb-Gateway 6.7.6 2008.11.11 Trojan.Agent.rnn[/B]
Sophos 4.35.0 2008.11.11 -
Sunbelt 3.1.1785.2 2008.11.11 -
[B]Symantec 10 2008.11.11 Trojan Horse[/B]
TheHacker 6.3.1.1.147 2008.11.10 -
[B]TrendMicro 8.700.0.1004 2008.11.11 BKDR_AGENT.BZ[/B]
VBA32 3.12.8.9 2008.11.10 -
ViRobot 2008.11.11.1460 2008.11.11 -
VirusBuster 4.5.11.0 2008.11.10 -
[/QUOTE]
13.11.2008, 11:15
Hanson

Файл [B]winctrl32.dll[/B] получен 2008.11.12 09:56:22 (CET)
Текущий статус: закончено
Результат: 12/36 (33.33%)
[QUOTE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.11.2 2008.11.12 -
[COLOR="Red"][B]AntiVir 7.9.0.31 2008.11.12 TR/Dropper.Gen[/B][/COLOR]
Authentium 5.1.0.4 2008.11.12 -
[B][COLOR="Red"]Avast 4.8.1248.0 2008.11.11 Win32:Trojan-gen {Other}[/COLOR][/B]
[B][COLOR="Red"]AVG 8.0.0.161 2008.11.11 Win32/Heur
BitDefender 7.2 2008.11.12 Trojan.Dropper.Kobcka.Gen.1[/COLOR][/B]
CAT-QuickHeal 9.50 2008.11.12 -
ClamAV 0.94.1 2008.11.12 -
[B][COLOR="Red"]DrWeb 4.44.0.09170 2008.11.12 BackDoor.Bulknet.225[/COLOR][/B]
eSafe 7.0.17.0 2008.11.11 -
eTrust-Vet 31.6.6203 2008.11.11 -
Ewido 4.0 2008.11.11 -
F-Prot 4.4.4.56 2008.11.11 -
F-Secure 8.0.14332.0 2008.11.12 -
Fortinet 3.117.0.0 2008.11.12 -
[B][COLOR="Red"]GData 19 2008.11.12 Trojan.Dropper.Kobcka.Gen.1[/COLOR][/B]
Ikarus T3.1.1.45.0 2008.11.12 -
K7AntiVirus 7.10.522 2008.11.11 -
Kaspersky 7.0.0.125 2008.11.12 -
[B][COLOR="Red"]McAfee 5431 2008.11.12 Cutwail.dll.gen
Microsoft 1.4104 2008.11.12 TrojanDownloader:Win32/Cutwail.S[/COLOR][/B]
NOD32 3605 2008.11.12 -
Norman 5.80.02 2008.11.11 -
Panda 9.0.0.4 2008.11.11 -
PCTools 4.4.2.0 2008.11.11 -
[B][COLOR="Red"]Prevx1 V2 2008.11.12 Malicious Software[/COLOR][/B]
Rising 21.03.20.00 2008.11.12 -
[B][COLOR="Red"]SecureWeb-Gateway 6.7.6 2008.11.12 Trojan.Dropper.Gen[/COLOR][/B]
Sophos 4.35.0 2008.11.12 -
Sunbelt 3.1.1785.2 2008.11.11 -
Symantec 10 2008.11.12 -
TheHacker 6.3.1.1.149 2008.11.12 -
TrendMicro 8.700.0.1004 2008.11.12 -
[B][COLOR="Red"]VBA32 3.12.8.9 2008.11.11 suspected of Embedded.Trojan-Downloader.Win32.Nicak[/COLOR][/B]
ViRobot 2008.11.12.1462 2008.11.12 -
[B][COLOR="Red"]VirusBuster 4.5.11.0 2008.11.11 Trojan.DR.Pandex.Gen.7[/QUOTE][/COLOR][/B]
13.11.2008, 12:12
kvit

[CODE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.13.2 2008.11.13 -
AntiVir 7.9.0.31 2008.11.13 -
Authentium 5.1.0.4 2008.11.12 -
Avast 4.8.1248.0 2008.11.12 -
[B]BitDefender 7.2 2008.11.13 BehavesLike:Trojan.ShellObject
[/B]CAT-QuickHeal 9.50 2008.11.12 -
ClamAV 0.94.1 2008.11.13 -
DrWeb 4.44.0.09170 2008.11.13 -
eSafe 7.0.17.0 2008.11.12 -
eTrust-Vet 31.6.6204 2008.11.11 -
Ewido 4.0 2008.11.12 -
F-Prot 4.4.4.56 2008.11.12 -
Fortinet 3.117.0.0 2008.11.13 -
GData 19 2008.11.13 -
Ikarus T3.1.1.45.0 2008.11.13 -
K7AntiVirus 7.10.523 2008.11.12 -
[B]Kaspersky 7.0.0.125 2008.11.13 Trojan-Spy.Win32.Agent.evf[/B]
McAfee 5432 2008.11.13 -
Microsoft 1.4104 2008.11.13 -
NOD32 3608 2008.11.13 -
Norman 5.80.02 2008.11.12 -
[B]Panda 9.0.0.4 2008.11.12 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.13 -
Rising 21.03.22.00 2008.11.12 -
SecureWeb-Gateway 6.7.6 2008.11.13 -
Sophos 4.35.0 2008.11.13 -
Sunbelt 3.1.1785.2 2008.11.11 -
Symantec 10 2008.11.13 -
TheHacker 6.3.1.1.151 2008.11.13 -
TrendMicro 8.700.0.1004 2008.11.13 -
VBA32 3.12.8.9 2008.11.12 -
ViRobot 2008.11.13.1464 2008.11.13 -
VirusBuster 4.5.11.0 2008.11.12 -
Дополнительная информация
File size: 24064 bytes
MD5...: 58d3976c41012ebf512eecd22bb782b3
SHA1..: b2bfa3e3ca372f11f4c21df10565a9214e4cd141
SHA256: baf8f3ec9e95df5e367a5c0267a3f097f8da9ee9d8b1b914aab7cbc338b27b8e
SHA512: 9ebef0bbcc74f72933fcf560803b51b7d6ff23c3bc2a70d0e980e6de93dd008a
33e914b72def62a9b3cac455068dd745cf31cdd9c7de8a566e51a6507206899b
PEiD..: -
[/CODE]

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

[CODE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.13.0 2008.11.13 -
AntiVir 7.9.0.31 2008.11.13 -
Authentium 5.1.0.4 2008.11.12 -
Avast 4.8.1248.0 2008.11.12 -
AVG 8.0.0.199 2008.11.12 -
BitDefender 7.2 2008.11.13 -
CAT-QuickHeal 9.50 2008.11.12 -
ClamAV 0.94.1 2008.11.13 -
DrWeb 4.44.0.09170 2008.11.13 -
eSafe 7.0.17.0 2008.11.12 -
eTrust-Vet 31.6.6208 2008.11.13 -
Ewido 4.0 2008.11.12 -
F-Prot 4.4.4.56 2008.11.12 -
[B]F-Secure 8.0.14332.0 2008.11.13 Trojan-Spy.Win32.Agent.evj[/B]
Fortinet 3.117.0.0 2008.11.13 -
GData 19 2008.11.13 -
Ikarus T3.1.1.45.0 2008.11.13 -
K7AntiVirus 7.10.523 2008.11.12 -
[B]Kaspersky 7.0.0.125 2008.11.13 Trojan-Spy.Win32.Agent.evj[/B]
McAfee 5432 2008.11.13 -
Microsoft 1.4104 2008.11.13 -
NOD32 3608 2008.11.13 -
Norman 5.80.02 2008.11.12 -
[B]Panda 9.0.0.4 2008.11.12 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.13 -
Prevx1 V2 2008.11.13 -
Rising 21.03.22.00 2008.11.12 -
SecureWeb-Gateway 6.7.6 2008.11.13 -
Sophos 4.35.0 2008.11.13 -
[B]Sunbelt 3.1.1785.2 2008.11.11 Virus.Win32.Agent.AJ (vf)[/B]
Symantec 10 2008.11.13 -
TheHacker 6.3.1.1.151 2008.11.13 -
TrendMicro 8.700.0.1004 2008.11.13 -
VBA32 3.12.8.9 2008.11.12 -
ViRobot 2008.11.13.1464 2008.11.13 -
VirusBuster 4.5.11.0 2008.11.12 -
Дополнительная информация
File size: 20480 bytes
MD5...: 9b9bc66a0b0de6fc3b3c24a8e98f2059
SHA1..: 33560b84a929114cbfcfbd91a6dce94edfc062ed
SHA256: b141c2cb4da0857eb5823e503802b4a680a4594a0fdde2a8ceba636cc6dfcb7d
SHA512: b59d52a798ada47efdfa54214d0f28ff554752c529fc505490b1ccc24ef04298
a32129994fd8c9f546beb2992c65a9fcda49b52d79b5b3200d9041351e63c968
PEiD..: -[/CODE]

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

[CODE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.13.2 2008.11.13 -
[B]AntiVir 7.9.0.31 2008.11.13 TR/Crypt.XPACK.Gen
Authentium 5.1.0.4 2008.11.12 W32/Ristix.A[/B]
Avast 4.8.1248.0 2008.11.12 -
[B]AVG 8.0.0.199 2008.11.12 Win32/Heur[/B]
BitDefender 7.2 2008.11.13 -
CAT-QuickHeal 9.50 2008.11.12 -
ClamAV 0.94.1 2008.11.13 -
DrWeb 4.44.0.09170 2008.11.13 -
eSafe 7.0.17.0 2008.11.12 -
eTrust-Vet 31.6.6204 2008.11.11 -
Ewido 4.0 2008.11.12 -
[B]F-Prot 4.4.4.56 2008.11.12 W32/Zbot.I.gen!Eldorado
F-Secure 8.0.14332.0 2008.11.13 Worm.Win32.AutoRun.sff[/B]
Fortinet 3.117.0.0 2008.11.13 -
GData 19 2008.11.13 -
[B]Ikarus T3.1.1.45.0 2008.11.13 Worm.Win32.AutoRun[/B]
K7AntiVirus 7.10.523 2008.11.12 -
[B]Kaspersky 7.0.0.125 2008.11.13 Worm.Win32.AutoRun.sff[/B]
McAfee 5432 2008.11.13 -
[B]Microsoft 1.4104 2008.11.13 Trojan:Win32/AgentBypass.gen!K[/B]
NOD32 3608 2008.11.13 -
Norman 5.80.02 2008.11.12 -
[B]Panda 9.0.0.4 2008.11.12 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.13 -
Prevx1 V2 2008.11.13 -
Rising 21.03.30.00 2008.11.13 -
[B]SecureWeb-Gateway 6.7.6 2008.11.13 Trojan.Crypt.XPACK.Gen[/B]
Sophos 4.35.0 2008.11.13 -
Sunbelt 3.1.1785.2 2008.11.11 -
Symantec 10 2008.11.13 -
TheHacker 6.3.1.1.151 2008.11.13 -
[B]TrendMicro 8.700.0.1004 2008.11.13 PAK_Generic.001
VBA32 3.12.8.9 2008.11.12 Trojan.Autorun.gen[/B]
ViRobot 2008.11.13.1464 2008.11.13 -
VirusBuster 4.5.11.0 2008.11.12 -
Дополнительная информация
File size: 24770 bytes
MD5...: 0d3335954da589c4fefdf544f6696fcf
SHA1..: cbd67db5092407a32457a2f8cd17ef51f1908849
SHA256: 8fc81c6c9414346256d2d4edce75f653061b438e2c068bef3c8153ea4e5eb0ff
SHA512: c1125f47fc9c4268acca3e6e7f3574647b6f13e92cd5f4d1794e10f0ac45597c
4378a374185796ad43b45aa5e13e4f1c518ae3fd220fa3a1a39c1e5236ccd63a
PEiD..: -[/CODE]

[size="1"][color="#666686"][B][I]Добавлено через 5 минут[/I][/B][/color][/size]

и еще плюс один который вообще ни один антивирус не нашел...
тот который никто не находил:
[QUOTE]Ваш запрос был проанализирован. Запись о новом вирусе добавлена в базу.
Вирус: Trojan.Blackmailer.291.[/QUOTE]
13.11.2008, 12:14
ISO

File clips01505.scr received on 11.13.2008 09:53:16 (CET)
Result: 11/36 (30.56%)

[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.13.2 2008.11.13 -
[B]AntiVir 7.9.0.31 2008.11.13 DR/Delphi.Gen[/B]
Authentium 5.1.0.4 2008.11.12 -
Avast 4.8.1248.0 2008.11.12 -
[B]AVG 8.0.0.199 2008.11.12 Win32/Heur[/B]
[B]BitDefender 7.2 2008.11.13 Trojan.Dropper.LdPinch.AO
CAT-QuickHeal 9.50 2008.11.12 TrojanPSW.LdPinch.abkf[/B]
ClamAV 0.94.1 2008.11.13 -
DrWeb 4.44.0.09170 2008.11.13 -
eSafe 7.0.17.0 2008.11.12 -
eTrust-Vet 31.6.6204 2008.11.11 -
Ewido 4.0 2008.11.12 -
F-Prot 4.4.4.56 2008.11.12 -
F-Secure 8.0.14332.0 2008.11.13 -
Fortinet 3.117.0.0 2008.11.13 -
[B]GData 19 2008.11.13 Trojan.Dropper.LdPinch.AO
Ikarus T3.1.1.45.0 2008.11.13 Downloader.Delphi[/B]
K7AntiVirus 7.10.523 2008.11.12 -
Kaspersky 7.0.0.125 2008.11.13 -
McAfee 5432 2008.11.13 -
Microsoft 1.4104 2008.11.13 -
[B]NOD32 3609 2008.11.13 a variant of Win32/Injector.DT[/B]
Norman 5.80.02 2008.11.12 -
Panda 9.0.0.4 2008.11.12 -
PCTools 4.4.2.0 2008.11.13 -
Prevx1 V2 2008.11.13 -
Rising 21.03.30.00 2008.11.13 -
[B]SecureWeb-Gateway 6.7.6 2008.11.13 Trojan.Dropper.Delphi.Gen
Sophos 4.35.0 2008.11.13 Troj/Merein-Gen[/B]
[B]Sunbelt 3.1.1785.2 2008.11.11 Trojan-PSW.Win32.OnLineGames.AFLB (vf)[/B]
Symantec 10 2008.11.13 -
TheHacker 6.3.1.1.151 2008.11.13 -
TrendMicro 8.700.0.1004 2008.11.13 -
[B]VBA32 3.12.8.9 2008.11.12 Malware-Cryptor.Win32.Xip[/B]
ViRobot 2008.11.13.1464 2008.11.13 -
VirusBuster 4.5.11.0 2008.11.12 -[/CODE]
Additional information
File size: 327680 bytes
MD5...: c0b52e992067fc43c7ac10cbabd0ee71
SHA1..: c57057305d14886dc6b9d236e7e69b29568ae04e
SHA256: 2f8ce5806dae02a5b76fb74c4e6e248178ae2caba458186336d5ec1b9dc28084
SHA512: ead5c5f730793eb113c1a09f2fee8c4adda19d09e85959fdbda5c61d3b17b1ab
1b3d26d45534475edb67eb2e085203a7586999d5408441a5251d88228fccbd0c
17.11.2008, 06:37
ISO

Файл virusscan.jotti.com из архива, скачанного по ссылке из этой темы [url]http://virusinfo.info/showthread.php?t=33974[/url]
File 1.exe received on 11.17.2008 04:26:24 (CET)
Result: 9/35 (25.72%)

[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.14.3 2008.11.17 -
[B]AntiVir 7.9.0.31 2008.11.16 DR/Delphi.Gen[/B]
Authentium 5.1.0.4 2008.11.17 -
Avast 4.8.1281.0 2008.11.16 -
AVG 8.0.0.199 2008.11.16 -
[B]BitDefender 7.2 2008.11.17 Trojan.Dropper.LdPinch.AO[/B]
CAT-QuickHeal 10.00 2008.11.15 -
ClamAV 0.94.1 2008.11.17 -
DrWeb 4.44.0.09170 2008.11.17 -
[B]eSafe 7.0.17.0 2008.11.16 Suspicious File[/B]
eTrust-Vet 31.6.6210 2008.11.14 -
Ewido 4.0 2008.11.16 -
F-Prot 4.4.4.56 2008.11.16 -
[B]F-Secure 8.0.14332.0 2008.11.17 Suspicious:W32/Malware!Gemini[/B]
Fortinet 3.117.0.0 2008.11.15 -
[B]GData 19 2008.11.17 Trojan.Dropper.LdPinch.AO[/B]
[B]Ikarus T3.1.1.45.0 2008.11.17 AdWare.SoftLayer[/B]
K7AntiVirus 7.10.526 2008.11.15 -
Kaspersky 7.0.0.125 2008.11.17 -
McAfee 5436 2008.11.16 -
Microsoft 1.4104 2008.11.17 -
NOD32 3615 2008.11.15 -
Norman 5.80.02 2008.11.14 -
[B]Panda 9.0.0.4 2008.11.16 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.16 -
Rising 21.03.42.00 2008.11.14 -
[B]SecureWeb-Gateway 6.7.6 2008.11.16 Trojan.Dropper.Delphi.Gen[/B]
Sophos 4.35.0 2008.11.17 -
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.17 -
TheHacker 6.3.1.1.155 2008.11.15 -
[B]TrendMicro 8.700.0.1004 2008.11.14 PAK_Generic.001[/B]
VBA32 3.12.8.9 2008.11.16 -
ViRobot 2008.11.17.1471 2008.11.17 -
VirusBuster 4.5.11.0 2008.11.16 -[/CODE]
Additional information
File size: 62976 bytes
MD5...: de69f09bc4d9365ddb519f7f14ba2d2e
SHA1..: a42d6fc76deb5bb39e4a6c8dbb9633885852622a
SHA256: 3a7930377eb4098d371827ba2c71892414afe9c7914b2fea36cfe01767cfa738
SHA512: 9db02bdd920d39c8feed03f281101111945665b7fb4a01c650e9fb694aa0a9da
d0fdbd3ec173280ef4f38c5252fa9ef37631cefd554214d272aa42ba3fa908ad
PEiD..: UPX 2.93 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser
TrID..: File type identification
Win32 Executable Generic (67.8%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
VXD Driver (0.2%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x422300
timedatestamp.....: 0x491ba782 (Thu Nov 13 04:05:22 2008)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
UPX0 0x1000 0x13000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
UPX1 0x14000 0xf000 0xf000 7.98 1d00a1d0110c03fdcec46aaeee5c6102
.rsrc 0x23000 0x1000 0x400 2.87 3053439ba625a5a3f1e0b8e29556614f

( 3 imports )
> KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess
> crtdll.dll: _rmdir
> shlwapi.dll: PathAddBackslashA

( 0 exports )
packers (F-Prot): embedded, UPX_LZMA
packers (Kaspersky): UPX
18.11.2008, 16:55
Shu_b

File wupdate.exe received on 11.18.2008 07:57:55 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.18.0 2008.11.18 -
[B]AntiVir 7.9.0.31 2008.11.17 HEUR/Crypted[/B]
Authentium 5.1.0.4 2008.11.18 -
Avast 4.8.1281.0 2008.11.17 -
[B]AVG 8.0.0.199 2008.11.17 SHeur.CHGW[/B]
BitDefender 7.2 2008.11.18 -
[B]CAT-QuickHeal 10.00 2008.11.17 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.11.18 -
DrWeb 4.44.0.09170 2008.11.18 -
eSafe 7.0.17.0 2008.11.17 -
eTrust-Vet 31.6.6210 2008.11.14 -
Ewido 4.0 2008.11.17 -
F-Prot 4.4.4.56 2008.11.17 -
F-Secure 8.0.14332.0 2008.11.18 -
Fortinet 3.117.0.0 2008.11.18 -
GData 19 2008.11.18 -
[B]Ikarus T3.1.1.45.0 2008.11.18 Trojan.Crypt.ASPM[/B]
K7AntiVirus 7.10.526 2008.11.15 -
Kaspersky 7.0.0.125 2008.11.18 -
McAfee 5437 2008.11.17 -
[B]Microsoft 1.4104 2008.11.17 Backdoor:Win32/Rbot.gen[/B]
NOD32 3620 2008.11.18 -
Norman 5.80.02 2008.11.17 -
[B]Panda 9.0.0.4 2008.11.17 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.17 -
Prevx1 V2 2008.11.18 -
Rising 21.04.10.00 2008.11.18 -
[B]SecureWeb-Gateway 6.7.6 2008.11.18 Heuristic.Crypted[/B]
Sophos 4.35.0 2008.11.18 -
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.18 -
TheHacker 6.3.1.1.157 2008.11.18 -
TrendMicro 8.700.0.1004 2008.11.18 -
VBA32 3.12.8.9 2008.11.17 -
ViRobot 2008.11.18.1473 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.17 -
Additional information
File size: 794624 bytes[/CODE]

[size="1"][color="#666686"][B][I]Добавлено через 6 часов 13 минут[/I][/B][/color][/size]

File ttuwj.sys received on 11.18.2008 14:11:55 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.18.2 2008.11.18 -
[B]AntiVir 7.9.0.31 2008.11.18 TR/Rootkit.Gen[/B]
Authentium 5.1.0.4 2008.11.18 -
[B]Avast 4.8.1281.0 2008.11.17 Win32:Rootkit-gen[/B]
AVG 8.0.0.199 2008.11.17 -
BitDefender 7.2 2008.11.18 -
CAT-QuickHeal 10.00 2008.11.18 -
ClamAV 0.94.1 2008.11.18 -
DrWeb 4.44.0.09170 2008.11.18 -
eSafe 7.0.17.0 2008.11.17 -
eTrust-Vet 31.6.6209 2008.11.14 -
Ewido 4.0 2008.11.18 -
F-Prot 4.4.4.56 2008.11.17 -
F-Secure 8.0.14332.0 2008.11.18 -
Fortinet 3.117.0.0 2008.11.18 -
[B]GData 19 2008.11.18 Win32:Rootkit-gen
Ikarus T3.1.1.45.0 2008.11.18 Backdoor.WinNT.Rustock[/B]
K7AntiVirus 7.10.526 2008.11.15 -
Kaspersky 7.0.0.125 2008.11.18 -
McAfee 5437 2008.11.17 -
[B]Microsoft 1.4104 2008.11.17 Backdoor:WinNT/Rustock.H[/B]
NOD32 3621 2008.11.18 -
[B]Norman 5.80.02 2008.11.18 W32/Rootkit.TFO
Panda 9.0.0.4 2008.11.17 Generic Malware[/B]
PCTools 4.4.2.0 2008.11.18 -
Prevx1 V2 2008.11.18 -
Rising 21.04.12.00 2008.11.18 -
[B]SecureWeb-Gateway 6.7.6 2008.11.18 Trojan.Rootkit.Gen[/B]
Sophos 4.35.0 2008.11.18 -
[B]Sunbelt 3.1.1801.2 2008.11.14 Trojan-GameThief.Win32.OnLineGames.TPC (vf)[/B]
Symantec 10 2008.11.18 -
TheHacker 6.3.1.1.157 2008.11.18 -
TrendMicro 8.700.0.1004 2008.11.18 -
VBA32 3.12.8.9 2008.11.17 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.17 -[/CODE]
Additional information
File size: 47104 bytes
MD5...: f39ed4922db5a0017a02f0dadfaac20a

[size="1"][color="#666686"][B][I]Добавлено через 33 минуты[/I][/B][/color][/size]

File wm9dap.dll received on 11.18.2008 14:32:37 (CET)
[CODE]Antivirus Version Last Update Result
[B]AhnLab-V3 2008.11.18.2 2008.11.18 Win32/Bagle.worm.73728.F[/B]
AntiVir 7.9.0.31 2008.11.18 -
[B]Authentium 5.1.0.4 2008.11.18 W32/Bongler-based!Maximus
Avast 4.8.1281.0 2008.11.17 Win32:Trojan-gen {Other}[/B]
AVG 8.0.0.199 2008.11.17 -
[B]BitDefender 7.2 2008.11.18 Win32.Worm.Bagle.ZLT[/B]
CAT-QuickHeal 10.00 2008.11.18 -
ClamAV 0.94.1 2008.11.18 -
DrWeb 4.44.0.09170 2008.11.18 -
eSafe 7.0.17.0 2008.11.17 -
eTrust-Vet 31.6.6210 2008.11.14 -
Ewido 4.0 2008.11.18 -
[B]F-Prot 4.4.4.56 2008.11.17 W32/Bongler-based!Maximus[/B]
F-Secure 8.0.14332.0 2008.11.18 -
Fortinet 3.117.0.0 2008.11.18 -
[B]GData 19 2008.11.18 Win32.Worm.Bagle.ZLT[/B]
Ikarus T3.1.1.45.0 2008.11.18 -
K7AntiVirus 7.10.526 2008.11.15 -
Kaspersky 7.0.0.125 2008.11.18 -
McAfee 5437 2008.11.17 -
Microsoft 1.4104 2008.11.17 -
NOD32 3621 2008.11.18 -
Norman 5.80.02 2008.11.18 -
Panda 9.0.0.4 2008.11.17 -
PCTools 4.4.2.0 2008.11.18 -
Prevx1 V2 2008.11.18 -
Rising 21.04.12.00 2008.11.18 -
SecureWeb-Gateway 6.7.6 2008.11.18 -
Sophos 4.35.0 2008.11.18 -
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.18 -
TheHacker 6.3.1.1.157 2008.11.18 -
TrendMicro 8.700.0.1004 2008.11.18 -
VBA32 3.12.8.9 2008.11.18 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.17 -[/CODE]
Additional information
File size: 73728 bytes

[size="1"][color="#666686"][B][I]Добавлено через 5 минут[/I][/B][/color][/size]

File antiviruspro2009.exe received on 11.18.2008 14:43:59 (CET)
[CODE]Antivirus Version Last Update Result
[B]AhnLab-V3 2008.11.18.2 2008.11.18 Win-Trojan/FakeAv.597323
AntiVir 7.9.0.31 2008.11.18 TR/Fakealert.HO[/B]
Authentium 5.1.0.4 2008.11.18 -
Avast 4.8.1281.0 2008.11.17 -
[B]AVG 8.0.0.199 2008.11.17 Downloader.Zlob.AGXV[/B]
BitDefender 7.2 2008.11.18 -
CAT-QuickHeal 10.00 2008.11.18 -
[B]ClamAV 0.94.1 2008.11.18 Trojan.FakeAV-17[/B]
DrWeb 4.44.0.09170 2008.11.18 -
eSafe 7.0.17.0 2008.11.17 -
eTrust-Vet 31.6.6209 2008.11.14 -
Ewido 4.0 2008.11.18 -
F-Prot 4.4.4.56 2008.11.17 -
F-Secure 8.0.14332.0 2008.11.18 -
Fortinet 3.117.0.0 2008.11.18 -
GData 19 2008.11.18 -
[B]Ikarus T3.1.1.45.0 2008.11.18 Trojan-Clicker.Win32.Klik[/B]
K7AntiVirus 7.10.526 2008.11.15 -
Kaspersky 7.0.0.125 2008.11.18 -
[B]McAfee 5437 2008.11.17 Generic FakeAlert.d
Microsoft 1.4104 2008.11.17 Trojan:Win32/FakeRean
NOD32 3621 2008.11.18 a variant of Win32/TrojanDownloader.FakeAlert.FP[/B]
Norman 5.80.02 2008.11.18 -
Panda 9.0.0.4 2008.11.17 -
PCTools 4.4.2.0 2008.11.18 -
[B]Prevx1 V2 2008.11.18 Malicious Software[/B]
Rising 21.04.12.00 2008.11.18 -
[B]SecureWeb-Gateway 6.7.6 2008.11.18 Trojan.Fakealert.HO
Sophos 4.35.0 2008.11.18 Mal/Generic-A[/B]
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.18 -
TheHacker 6.3.1.1.157 2008.11.18 -
TrendMicro 8.700.0.1004 2008.11.18 -
[B]VBA32 3.12.8.9 2008.11.18 Trojan.Win32.FraudPack.gtt[/B]
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.17 -[/CODE]
Additional information
File size: 597323 bytes
19.11.2008, 16:25
Shu_b

File mschco.exe received on 11.19.2008 11:21:50 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.18.2 2008.11.19 -
[B]AntiVir 7.9.0.34 2008.11.19 TR/ATRAPS.Gen
[/B]Authentium 5.1.0.4 2008.11.18 -
Avast 4.8.1281.0 2008.11.18 -
[B]AVG 8.0.0.199 2008.11.19 Generic12.OIV
BitDefender 7.2 2008.11.19 BehavesLike:Win32.ExplorerHijack
[/B]CAT-QuickHeal 10.00 2008.11.19 -
ClamAV 0.94.1 2008.11.19 -
DrWeb 4.44.0.09170 2008.11.19 -
eSafe 7.0.17.0 2008.11.18 -
eTrust-Vet 31.6.6217 2008.11.19 -
Ewido 4.0 2008.11.18 -
F-Prot 4.4.4.56 2008.11.18 -
[B]F-Secure 8.0.14332.0 2008.11.19 W32/Malware
[/B]Fortinet 3.117.0.0 2008.11.19 -
[B]GData 19 2008.11.19 BehavesLike:Win32.ExplorerHijack
Ikarus T3.1.1.45.0 2008.11.19 Trojan-Dropper.Agent
[/B]K7AntiVirus 7.10.527 2008.11.18 -
[B]Kaspersky 7.0.0.125 2008.11.19 Heur.Trojan.Generic
[/B]McAfee 5438 2008.11.18 -
Microsoft 1.4104 2008.11.19 -
NOD32 3623 2008.11.18 -
[B]Norman 5.80.02 2008.11.18 W32/Malware
Panda 9.0.0.4 2008.11.19 Suspicious file
[/B]PCTools 4.4.2.0 2008.11.18 -
Prevx1 V2 2008.11.19 -
Rising 21.04.22.00 2008.11.19 -
[B]SecureWeb-Gateway 6.7.6 2008.11.19 Trojan.ATRAPS.Gen
Sophos 4.35.0 2008.11.19 Mal/Behav-204
[/B]Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.19 -
TheHacker 6.3.1.1.158 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.19 -
VBA32 3.12.8.9 2008.11.18 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.18 -[/CODE]
Additional information
File size: 66560 bytes
MD5...: 07cf2d63869c7dd52e464e36cdece5ee

[size="1"][color="#666686"][B][I]Добавлено через 2 часа 40 минут[/I][/B][/color][/size]

File Client_gerda.exe received on 11.19.2008 14:12:39 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.18.2 2008.11.19 -
AntiVir 7.9.0.34 2008.11.19 -
Authentium 5.1.0.4 2008.11.18 -
Avast 4.8.1281.0 2008.11.18 -
AVG 8.0.0.199 2008.11.19 -
BitDefender 7.2 2008.11.19 -
CAT-QuickHeal 10.00 2008.11.19 -
ClamAV 0.94.1 2008.11.19 -
DrWeb 4.44.0.09170 2008.11.19 -
eSafe 7.0.17.0 2008.11.18 -
eTrust-Vet 31.6.6217 2008.11.19 -
Ewido 4.0 2008.11.18 -
F-Prot 4.4.4.56 2008.11.18 -
F-Secure 8.0.14332.0 2008.11.19 -
Fortinet 3.117.0.0 2008.11.19 -
GData 19 2008.11.19 -
Ikarus T3.1.1.45.0 2008.11.19 -
K7AntiVirus 7.10.527 2008.11.18 -
Kaspersky 7.0.0.125 2008.11.19 -
McAfee 5438 2008.11.18 -
Microsoft 1.4104 2008.11.19 -
[B]NOD32 3624 2008.11.19 a variant of Win32/Packed.Themida[/B]
Norman 5.80.02 2008.11.18 -
Panda 9.0.0.4 2008.11.19 -
PCTools 4.4.2.0 2008.11.19 -
Prevx1 V2 2008.11.19 -
Rising 21.04.22.00 2008.11.19 -
[B]SecureWeb-Gateway 6.7.6 2008.11.19 Win32.EPO.gen (suspicious)
Sophos 4.35.0 2008.11.19 Sus/UnkPacker[/B]
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.19 -
TheHacker 6.3.1.1.158 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.19 -
VBA32 3.12.8.9 2008.11.18 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.18 -[/CODE]
Additional information
File size: 2816512 bytes

[size="1"][color="#666686"][B][I]Добавлено через 8 минут[/I][/B][/color][/size]

File services.exe received on 11.19.2008 14:22:18 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.18.2 2008.11.19 -
AntiVir 7.9.0.34 2008.11.19 -
Authentium 5.1.0.4 2008.11.18 -
Avast 4.8.1281.0 2008.11.18 -
[B]AVG 8.0.0.199 2008.11.19 Downloader.Generic_r.BT[/B]
BitDefender 7.2 2008.11.19 -
[B]CAT-QuickHeal 10.00 2008.11.19 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.11.19 -
DrWeb 4.44.0.09170 2008.11.19 -
eSafe 7.0.17.0 2008.11.18 -
eTrust-Vet 31.6.6217 2008.11.19 -
Ewido 4.0 2008.11.18 -
F-Prot 4.4.4.56 2008.11.18 -
F-Secure 8.0.14332.0 2008.11.19 -
Fortinet 3.117.0.0 2008.11.19 -
GData 19 2008.11.19 -
Ikarus T3.1.1.45.0 2008.11.19 -
K7AntiVirus 7.10.527 2008.11.18 -
Kaspersky 7.0.0.125 2008.11.19 -
McAfee 5438 2008.11.18 -
Microsoft 1.4104 2008.11.19 -
[B]NOD32 3624 2008.11.19 probably a variant of Win32/Kryptik.BJ[/B]
Norman 5.80.02 2008.11.18 -
Panda 9.0.0.4 2008.11.19 -
PCTools 4.4.2.0 2008.11.19 -
Prevx1 V2 2008.11.19 -
Rising 21.04.22.00 2008.11.19 -
[B]SecureWeb-Gateway 6.7.6 2008.11.19 Trojan.LooksLike.Agent[/B]
Sophos 4.35.0 2008.11.19 -
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.19 -
TheHacker 6.3.1.1.158 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.19 -
VBA32 3.12.8.9 2008.11.18 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.18 -[/CODE]
Additional information
File size: 43520 bytes
MD5...: f8250fd02168d36d7ecb6c6ba1429f45
20.11.2008, 14:30
Shu_b

File rs32net.exe received on 11.20.2008 11:48:48 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.20.3 2008.11.20 -
[B]AntiVir 7.9.0.34 2008.11.20 TR/Dropper.Gen[/B]
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.19 -
AVG 8.0.0.199 2008.11.19 -
BitDefender 7.2 2008.11.20 -
CAT-QuickHeal 10.00 2008.11.20 -
ClamAV 0.94.1 2008.11.20 -
DrWeb 4.44.0.09170 2008.11.20 -
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6219 2008.11.20 -
Ewido 4.0 2008.11.19 -
F-Prot 4.4.4.56 2008.11.20 -
F-Secure 8.0.14332.0 2008.11.20 -
Fortinet 3.117.0.0 2008.11.20 -
GData 19 2008.11.20 -
Ikarus T3.1.1.45.0 2008.11.20 -
K7AntiVirus 7.10.528 2008.11.19 -
Kaspersky 7.0.0.125 2008.11.20 -
McAfee 5439 2008.11.19 -
[B]Microsoft 1.4104 2008.11.20 TrojanDropper:Win32/Cutwail.AL[/B]
NOD32 3626 2008.11.19 -
Norman 5.80.02 2008.11.19 -
Panda 9.0.0.4 2008.11.20 -
PCTools 4.4.2.0 2008.11.19 -
Prevx1 V2 2008.11.20 Malicious Software
Rising 21.04.32.00 2008.11.20 -
[B]SecureWeb-Gateway 6.7.6 2008.11.20 Trojan.Dropper.Gen
Sophos 4.35.0 2008.11.20 Troj/Bravo-I[/B]
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.20 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.20 -
VBA32 3.12.8.9 2008.11.19 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.19 -[/CODE]
Additional information
File size: 22528 bytes
MD5...: 5e14eee58af9bf39dd2c35177dd4fd97

[size="1"][color="#666686"][B][I]Добавлено через 21 минуту[/I][/B][/color][/size]

File RQRSPOVS.sys received on 11.20.2008 12:11:22 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.20.3 2008.11.20 -
AntiVir 7.9.0.34 2008.11.20 -
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.19 -
AVG 8.0.0.199 2008.11.19 -
BitDefender 7.2 2008.11.20 -
CAT-QuickHeal 10.00 2008.11.20 -
ClamAV 0.94.1 2008.11.20 -
DrWeb 4.44.0.09170 2008.11.20 -
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6219 2008.11.20 -
Ewido 4.0 2008.11.19 -
F-Prot 4.4.4.56 2008.11.20 -
F-Secure 8.0.14332.0 2008.11.20 -
Fortinet 3.117.0.0 2008.11.20 -
GData 19 2008.11.20 -
Ikarus T3.1.1.45.0 2008.11.20 -
K7AntiVirus 7.10.528 2008.11.19 -
Kaspersky 7.0.0.125 2008.11.20 -
McAfee 5439 2008.11.19 -
Microsoft 1.4104 2008.11.20 -
NOD32 3627 2008.11.20 -
Norman 5.80.02 2008.11.19 -
Panda 9.0.0.4 2008.11.20 -
PCTools 4.4.2.0 2008.11.19 -
Prevx1 V2 2008.11.20 -
Rising 21.04.32.00 2008.11.20 -
[B]SecureWeb-Gateway 6.7.6 2008.11.20 Trojan.LooksLike.Rootkit[/B]
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.20 -
TheHacker 6.3.1.1.159 2008.11.19 -
[B]TrendMicro 8.700.0.1004 2008.11.20 Cryp_Xed-3[/B]
VBA32 3.12.8.9 2008.11.19 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.19 -[/CODE]
Additional information
File size: 176640 bytes
MD5...: 7de9a3c67dc9c95275d594662bb7c993

[size="1"][color="#666686"][B][I]Добавлено через 15 минут[/I][/B][/color][/size]

File Microsoft Common\svchost.exe received on 11.20.2008 12:26:54 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.20.3 2008.11.20 -
AntiVir 7.9.0.34 2008.11.20 -
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.19 -
[B]AVG 8.0.0.199 2008.11.19 SHeur2.CKX[/B]
BitDefender 7.2 2008.11.20 -
[B]CAT-QuickHeal 10.00 2008.11.20 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.11.20 -
DrWeb 4.44.0.09170 2008.11.20 -
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6219 2008.11.20 -
Ewido 4.0 2008.11.19 -
F-Prot 4.4.4.56 2008.11.20 -
[B]F-Secure 8.0.14332.0 2008.11.20 W32/Zbot.BDS[/B]
Fortinet 3.117.0.0 2008.11.20 -
GData 19 2008.11.20 -
[B]Ikarus T3.1.1.45.0 2008.11.20 Trojan.Win32.AgentBypass[/B]
K7AntiVirus 7.10.528 2008.11.19 -
Kaspersky 7.0.0.125 2008.11.20 -
McAfee 5439 2008.11.19 -
[B]Microsoft 1.4104 2008.11.20 Trojan:Win32/AgentBypass.gen!K[/B]
NOD32 3627 2008.11.20 -
[B]Norman 5.80.02 2008.11.19 W32/Zbot.BDS[/B]
Panda 9.0.0.4 2008.11.20 -
PCTools 4.4.2.0 2008.11.19 -
Prevx1 V2 2008.11.20 -
[B]Rising 21.04.32.00 2008.11.20 Worm.Win32.Agent.aaj
SecureWeb-Gateway 6.7.6 2008.11.20 Win32.NewMalware.HM!27136!4[/B]
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.20 -
TheHacker 6.3.1.1.159 2008.11.19 -
[B]TrendMicro 8.700.0.1004 2008.11.20 PAK_Generic.001
VBA32 3.12.8.9 2008.11.19 Worm.Win32.AutoRun.rjn[/B]
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.19 -[/CODE]
Additional information
File size: 27136 bytes
21.11.2008, 09:56
Phoenix

Предыдущая проверка кем-то на тотале была с результатом 10/36 от 12.11.2008.
Медленно реагируют господа аналитики... >:(

Файл mzlcjb.exe получен 2008.11.21 07:39:36 (CET)
[CODE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.21.0 2008.11.20 -
[B]AntiVir 7.9.0.34 2008.11.20 TR/Autoit.420098[/B]
Authentium 5.1.0.4 2008.11.20 -
[B]Avast 4.8.1281.0 2008.11.20 Win32:Rootkit-gen
AVG 8.0.0.199 2008.11.20 Worm/Autoit.FOX[/B]
BitDefender 7.2 2008.11.21 -
CAT-QuickHeal 10.00 2008.11.21 -
ClamAV 0.94.1 2008.11.21 -
DrWeb 4.44.0.09170 2008.11.20 -
[B]eSafe 7.0.17.0 2008.11.19 Win32.Autoit.fj[/B]
eTrust-Vet 31.6.6220 2008.11.21 -
Ewido 4.0 2008.11.20 -
F-Prot 4.4.4.56 2008.11.21 -
[B]F-Secure 8.0.14332.0 2008.11.21 Trojan.Win32.Autoit.fj
Fortinet 3.117.0.0 2008.11.21 W32/Autoit.FJ!tr
GData 19 2008.11.21 Win32:Rootkit-gen
Ikarus T3.1.1.45.0 2008.11.21 Trojan.Win32.Autoit.dt[/B]
K7AntiVirus 7.10.529 2008.11.20 -
[B]Kaspersky 7.0.0.125 2008.11.21 Trojan.Win32.Autoit.fj[/B]
McAfee 5440 2008.11.20 -
[B]Microsoft 1.4104 2008.11.21 Trojan:Win32/Meredrop[/B]
[COLOR="Red"]NOD32 3629 2008.11.21 -[/COLOR]
[B]Norman 5.80.02 2008.11.20 W32/Agent.JIIR
Panda 9.0.0.4 2008.11.20 W32/Sohanat.AS.worm[/B]
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
Rising 21.04.40.00 2008.11.21 -
[B]SecureWeb-Gateway 6.7.6 2008.11.21 Trojan.Autoit.420098
Sophos 4.35.0 2008.11.20 Sus/Behav-1011[/B]
Sunbelt 3.1.1801.2 2008.11.14 -
[B]Symantec 10 2008.11.21 W32.Harakit
TheHacker 6.3.1.1.159 2008.11.19 Trojan/Autoit.gs[/B]
TrendMicro 8.700.0.1004 2008.11.21 -
[B]VBA32 3.12.8.9 2008.11.20 Trojan.Win32.Autoit.fj[/B]
ViRobot 2008.11.18.1474 2008.11.18 -
[B]VirusBuster 4.5.11.0 2008.11.20 Trojan.Autoit.ED[/B][/CODE]
Дополнительная информация
File size: 420614 bytes
MD5...: 12a2b1e6075df82adb55b0091d0fb3f8
SHA1..: 2a73bbfe558ef5f7c7fecb991513598456d5609b
SHA256: c950a445c37e58538b1c64b28397b425d521eb2dacc73bd62e9cb6a4e31eca76
SHA512: 4b36f77d26a396579fd1872171372f446dba448ea682cee6db03614e8ea78d71 a47d33e7df9c34152d6cdc79f00be271cf1d55a3cf706b54882bac8b383eb721
PEiD..: -
TrID..: File type identification UPX compressed Win32 Executable (39.5%) Win32 EXE Yoda's Crypter (34.3%) Win32 Executable Generic (11.0%) Win32 Dynamic Link Library (generic) (9.8%) Generic Win/DOS Executable (2.5%)
PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x490490 timedatestamp.....: 0x4850e379 (Thu Jun 12 08:51:05 2008) machinetype.......: 0x14c (I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 UPX0 0x1000 0x58000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e UPX1 0x59000 0x38000 0x37800 7.93 c8cb0c68e090a662ba2868cc32095c1b .rsrc 0x91000 0x1000 0x600 3.31 d013d2373cc18dfe81eb1acfaa18d88b ( 13 imports ) > KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess > ADVAPI32.dll: RegCloseKey > COMCTL32.dll: ImageList_Create > comdlg32.dll: GetSaveFileNameW > GDI32.dll: LineTo > MPR.dll: WNetUseConnectionW > ole32.dll: CoInitialize > OLEAUT32.dll: - > SHELL32.dll: DragFinish > USER32.dll: GetDC > VERSION.dll: VerQueryValueW > WINMM.dll: timeGetTime > WSOCK32.dll: - ( 0 exports ) 
packers (Kaspersky): PE_Patch.UPX, UPX
packers (F-Prot): UPX
21.11.2008, 14:13
Shu_b

File msansspc.dll received on 11.21.2008 08:39:34 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.20 -
AntiVir 7.9.0.34 2008.11.20 -
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.20 -
AVG 8.0.0.199 2008.11.20 -
BitDefender 7.2 2008.11.21 -
CAT-QuickHeal 10.00 2008.11.21 -
ClamAV 0.94.1 2008.11.21 -
[B]DrWeb 4.44.0.09170 2008.11.20 Trojan.Inject.4675[/B]
eSafe 7.0.17.0 2008.11.19 Suspicious File
eTrust-Vet 31.6.6219 2008.11.20 -
Ewido 4.0 2008.11.20 -
F-Prot 4.4.4.56 2008.11.21 -
F-Secure 8.0.14332.0 2008.11.21 -
Fortinet 3.117.0.0 2008.11.21 -
GData 19 2008.11.21 -
Ikarus T3.1.1.45.0 2008.11.21 -
K7AntiVirus 7.10.529 2008.11.20 -
[B]Kaspersky 7.0.0.125 2008.11.21 Backdoor.Win32.Small.gsc[/B]
McAfee 5440 2008.11.20 -
Microsoft 1.4104 2008.11.21 -
NOD32 3629 2008.11.21 -
Norman 5.80.02 2008.11.20 -
Panda 9.0.0.4 2008.11.20 -
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
[B]Rising 21.04.40.00 2008.11.21 Trojan.Win32.Undef.tap[/B]
SecureWeb-Gateway 6.7.6 2008.11.21 -
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1801.2 2008.11.14 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
VBA32 3.12.8.9 2008.11.20 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 28160 bytes
MD5...: f0f3bf172996b2ae0dd399b7119f94a1

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

File ie567.dll received on 11.21.2008 08:53:15 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.20 -
AntiVir 7.9.0.34 2008.11.21 -
[B]Authentium 5.1.0.4 2008.11.20 W32/Heuristic-KPP!Eldorado[/B]
Avast 4.8.1281.0 2008.11.20 -
AVG 8.0.0.199 2008.11.20 -
BitDefender 7.2 2008.11.21 -
[B]CAT-QuickHeal 10.00 2008.11.21 Win32.TrojanSpy.Hitpop.gen!C.6[/B]
ClamAV 0.94.1 2008.11.21 -
DrWeb 4.44.0.09170 2008.11.21 -
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6220 2008.11.21 -
Ewido 4.0 2008.11.20 -
[B]F-Prot 4.4.4.56 2008.11.21 W32/Heuristic-KPP!Eldorado[/B]
F-Secure 8.0.14332.0 2008.11.21 -
Fortinet 3.117.0.0 2008.11.21 -
GData 19 2008.11.21 -
Ikarus T3.1.1.45.0 2008.11.21 -
K7AntiVirus 7.10.529 2008.11.20 -
Kaspersky 7.0.0.125 2008.11.21 -
McAfee 5440 2008.11.20 -
Microsoft 1.4104 2008.11.21 -
NOD32 3629 2008.11.21 -
[B]Norman 5.80.02 2008.11.20 W32/Malware.EJQN
Panda 9.0.0.4 2008.11.20 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 Worm
[B]Rising 21.04.40.00 2008.11.21 AdWare.Win32.Mnless.aof[/B]
SecureWeb-Gateway 6.7.6 2008.11.21 -
[B]Sophos 4.35.0 2008.11.20 Mal/Behav-304[/B]
Sunbelt 3.1.1823.2 2008.11.21 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
VBA32 3.12.8.9 2008.11.20 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 46592 bytes

[size="1"][color="#666686"][B][I]Добавлено через 7 минут[/I][/B][/color][/size]

File qyklib.dll received on 11.21.2008 09:05:51 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.20 -
AntiVir 7.9.0.34 2008.11.21 -
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.20 -
AVG 8.0.0.199 2008.11.20 -
BitDefender 7.2 2008.11.21 -
CAT-QuickHeal 10.00 2008.11.21 -
ClamAV 0.94.1 2008.11.21 -
[B]DrWeb 4.44.0.09170 2008.11.21 Trojan.Virtumod.852[/B]
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6220 2008.11.21 -
Ewido 4.0 2008.11.20 -
F-Prot 4.4.4.56 2008.11.21 -
[B]F-Secure 8.0.14332.0 2008.11.21 Trojan-Downloader.Win32.BHO.zt[/B]
Fortinet 3.117.0.0 2008.11.21 -
GData 19 2008.11.21 -
Ikarus T3.1.1.45.0 2008.11.21 -
K7AntiVirus 7.10.529 2008.11.20 -
[B]Kaspersky 7.0.0.125 2008.11.21 Trojan-Downloader.Win32.BHO.zt[/B]
McAfee 5440 2008.11.20 -
Microsoft 1.4104 2008.11.21 -
NOD32 3629 2008.11.21 -
Norman 5.80.02 2008.11.20 -
Panda 9.0.0.4 2008.11.20 -
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
Rising 21.04.40.00 2008.11.21 -
SecureWeb-Gateway 6.7.6 2008.11.21 -
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1823.2 2008.11.21 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
VBA32 3.12.8.9 2008.11.20 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 330240 bytes
MD5...: 3ef71d8bb7020a5b2850fe47d5a62a49

[size="1"][color="#666686"][B][I]Добавлено через 3 минуты[/I][/B][/color][/size]

File avz00003.dta received on 11.21.2008 09:06:51 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.20 -
AntiVir 7.9.0.34 2008.11.21 -
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.20 -
[B]AVG 8.0.0.199 2008.11.20 Win32/Heur[/B]
BitDefender 7.2 2008.11.21 -
[B]CAT-QuickHeal 10.00 2008.11.21 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.11.21 -
DrWeb 4.44.0.09170 2008.11.21 -
[B]eSafe 7.0.17.0 2008.11.19 Suspicious File[/B]
eTrust-Vet 31.6.6220 2008.11.21 -
Ewido 4.0 2008.11.20 -
F-Prot 4.4.4.56 2008.11.21 -
[B]F-Secure 8.0.14332.0 2008.11.21 Trojan.Win32.Agent.aouk[/B]
Fortinet 3.117.0.0 2008.11.21 -
GData 19 2008.11.21 -
[B]Ikarus T3.1.1.45.0 2008.11.21 Backdoor.Win32.Momibot[/B]
K7AntiVirus 7.10.529 2008.11.20 -
[B]Kaspersky 7.0.0.125 2008.11.21 Trojan.Win32.Agent.aouk[/B]
McAfee 5440 2008.11.20 -
[B]Microsoft 1.4104 2008.11.21 Backdoor:Win32/Momibot.gen!B[/B]
NOD32 3629 2008.11.21 -
Norman 5.80.02 2008.11.20 -
Panda 9.0.0.4 2008.11.20 -
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
Rising 21.04.40.00 2008.11.21 -
SecureWeb-Gateway 6.7.6 2008.11.21 -
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1823.2 2008.11.21 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
VBA32 3.12.8.9 2008.11.20 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 42496 bytes

[size="1"][color="#666686"][B][I]Добавлено через 9 минут[/I][/B][/color][/size]

File msvcrt48.dll received on 11.21.2008 09:16:54 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.20 -
AntiVir 7.9.0.34 2008.11.21 -
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.20 -
[B]AVG 8.0.0.199 2008.11.20 PSW.Agent.WGY[/B]
BitDefender 7.2 2008.11.21 -
CAT-QuickHeal 10.00 2008.11.21 -
ClamAV 0.94.1 2008.11.21 -
DrWeb 4.44.0.09170 2008.11.21 -
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6220 2008.11.21 -
Ewido 4.0 2008.11.20 -
F-Prot 4.4.4.56 2008.11.21 -
[B]F-Secure 8.0.14332.0 2008.11.21 Trojan-Spy.Win32.Agent.eyl
Fortinet 3.117.0.0 2008.11.21 Spy/Agent[/B]
GData 19 2008.11.21 -
Ikarus T3.1.1.45.0 2008.11.21 -
K7AntiVirus 7.10.529 2008.11.20 -
[B]Kaspersky 7.0.0.125 2008.11.21 Trojan-Spy.Win32.Agent.eyl[/B]
McAfee 5440 2008.11.20 -
Microsoft 1.4104 2008.11.21 -
NOD32 3629 2008.11.21 -
Norman 5.80.02 2008.11.20 -
[B]Panda 9.0.0.4 2008.11.20 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
Rising 21.04.40.00 2008.11.21 -
SecureWeb-Gateway 6.7.6 2008.11.21 -
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1823.2 2008.11.21 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
VBA32 3.12.8.9 2008.11.20 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 20480 bytes

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

File msconfig.exe received on 11.21.2008 09:17:48 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.20 -
[B]AntiVir 7.9.0.34 2008.11.21 TR/Dropper.Gen[/B]
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.20 -
AVG 8.0.0.199 2008.11.20 -
BitDefender 7.2 2008.11.21 -
[B]CAT-QuickHeal 10.00 2008.11.21 TrojanDropper.Agent.zaq[/B]
ClamAV 0.94.1 2008.11.21 -
DrWeb 4.44.0.09170 2008.11.21 -
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6219 2008.11.20 -
Ewido 4.0 2008.11.20 -
F-Prot 4.4.4.56 2008.11.21 -
[B]F-Secure 8.0.14332.0 2008.11.21 Trojan-Dropper.Win32.Agent.zxz[/B]
Fortinet 3.117.0.0 2008.11.21 -
GData 19 2008.11.21 -
Ikarus T3.1.1.45.0 2008.11.21 -
K7AntiVirus 7.10.529 2008.11.20 -
[B]Kaspersky 7.0.0.125 2008.11.21 Trojan-Dropper.Win32.Agent.zxz[/B]
McAfee 5440 2008.11.20 -
Microsoft 1.4104 2008.11.21 -
NOD32 3629 2008.11.21 -
Norman 5.80.02 2008.11.20 -
[B]Panda 9.0.0.4 2008.11.20 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
Rising 21.04.40.00 2008.11.21 -
[B]SecureWeb-Gateway 6.7.6 2008.11.21 Trojan.Dropper.Gen[/B]
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1823.2 2008.11.21 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
[B]VBA32 3.12.8.9 2008.11.20 Trojan-Dropper.Win32.Agent.zaq[/B]
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 25088 bytes

[size="1"][color="#666686"][B][I]Добавлено через 20 минут[/I][/B][/color][/size]

File 1.tmp received on 11.21.2008 09:40:18 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.21 -
AntiVir 7.9.0.34 2008.11.21 -
Authentium 5.1.0.4 2008.11.20 -
Avast 4.8.1281.0 2008.11.20 -
AVG 8.0.0.199 2008.11.20 -
BitDefender 7.2 2008.11.21 -
CAT-QuickHeal 10.00 2008.11.21 -
ClamAV 0.94.1 2008.11.21 -
[B]DrWeb 4.44.0.09170 2008.11.21 Trojan.EmailSpy.origin[/B]
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6220 2008.11.21 -
Ewido 4.0 2008.11.20 -
F-Prot 4.4.4.56 2008.11.21 -
F-Secure 8.0.14332.0 2008.11.21 -
Fortinet 3.117.0.0 2008.11.21 -
GData 19 2008.11.21 -
[B]Ikarus T3.1.1.45.0 2008.11.21 Trojan-PWS.Win32.LdPinch[/B]
K7AntiVirus 7.10.529 2008.11.20 -
Kaspersky 7.0.0.125 2008.11.21 -
McAfee 5440 2008.11.20 -
Microsoft 1.4104 2008.11.21 -
NOD32 3629 2008.11.21 -
Norman 5.80.02 2008.11.20 -
Panda 9.0.0.4 2008.11.20 -
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
Rising 21.04.40.00 2008.11.21 -
SecureWeb-Gateway 6.7.6 2008.11.21 -
Sophos 4.35.0 2008.11.20 -
Sunbelt 3.1.1823.2 2008.11.21 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
[B]VBA32 3.12.8.9 2008.11.20 suspected of Email-Worm.Bagle.2 [/B](paranoid heuristics)
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 17408 bytes

[size="1"][color="#666686"][B][I]Добавлено через 2 часа 29 минут[/I][/B][/color][/size]

File twext.exe received on 11.21.2008 12:10:31 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.21 -
AntiVir 7.9.0.34 2008.11.21 -
Authentium 5.1.0.4 2008.11.20 -
[B]Avast 4.8.1281.0 2008.11.20 Win32:Rootkit-gen
AVG 8.0.0.199 2008.11.20 Win32/Heur[/B]
BitDefender 7.2 2008.11.21 -
CAT-QuickHeal 10.00 2008.11.21 -
ClamAV 0.94.1 2008.11.21 -
DrWeb 4.44.0.09170 2008.11.21 -
eSafe 7.0.17.0 2008.11.19 -
eTrust-Vet 31.6.6221 2008.11.21 -
Ewido 4.0 2008.11.20 -
[B]F-Prot 4.4.4.56 2008.11.21 W32/Tibs.AA.gen!Eldorado[/B]
F-Secure 8.0.14332.0 2008.11.21 -
Fortinet 3.117.0.0 2008.11.21 -
[B]GData 19 2008.11.21 Win32:Rootkit-gen[/B]
Ikarus T3.1.1.45.0 2008.11.21 -
K7AntiVirus 7.10.529 2008.11.20 -
Kaspersky 7.0.0.125 2008.11.21 -
[B]McAfee 5440 2008.11.20 PWS-Zbot.gen.c
McAfee+Artemis 5440 2008.11.20 PWS-Zbot.gen.c[/B]
Microsoft 1.4104 2008.11.21 -
NOD32 3629 2008.11.21 -
[B]Norman 5.80.02 2008.11.20 W32/Malware.EMMQ
Panda 9.0.0.4 2008.11.20 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.20 -
Prevx1 V2 2008.11.21 -
Rising 21.04.42.00 2008.11.21 -
SecureWeb-Gateway 6.7.6 2008.11.21 -
Sophos 4.35.0 2008.11.21 -
Sunbelt 3.1.1823.2 2008.11.21 -
Symantec 10 2008.11.21 -
TheHacker 6.3.1.1.159 2008.11.19 -
TrendMicro 8.700.0.1004 2008.11.21 -
VBA32 3.12.8.9 2008.11.20 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.20 -[/CODE]
Additional information
File size: 180224 bytes
MD5...: 76cd24722cdae9e4d955d8c5f76577d9
24.11.2008, 12:18
Shu_b

File MyCentriaInfoBar.dll received on 11.24.2008 07:30:28 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.24 -
AntiVir 7.9.0.35 2008.11.23 -
Authentium 5.1.0.4 2008.11.24 -
Avast 4.8.1281.0 2008.11.23 -
[B]AVG 8.0.0.199 2008.11.23 Generic.BK[/B]
BitDefender 7.2 2008.11.24 -
CAT-QuickHeal 10.00 2008.11.24 -
ClamAV 0.94.1 2008.11.24 -
DrWeb 4.44.0.09170 2008.11.24 -
eSafe 7.0.17.0 2008.11.23 -
eTrust-Vet 31.6.6222 2008.11.22 -
Ewido 4.0 2008.11.23 -
F-Prot 4.4.4.56 2008.11.24 -
F-Secure 8.0.14332.0 2008.11.24 -
Fortinet 3.117.0.0 2008.11.23 -
GData 19 2008.11.24 -
Ikarus T3.1.1.45.0 2008.11.24 -
K7AntiVirus 7.10.531 2008.11.22 -
Kaspersky 7.0.0.125 2008.11.24 -
McAfee 5443 2008.11.23 -
McAfee+Artemis 5443 2008.11.23 -
Microsoft 1.4104 2008.11.24 -
[B]NOD32 3633 2008.11.24 a variant of Win32/Adware.Mycentria.AA[/B]
Norman 5.80.02 2008.11.22 -
Panda 9.0.0.4 2008.11.23 -
PCTools 4.4.2.0 2008.11.23 -
Prevx1 V2 2008.11.24 -
Rising 21.05.00.00 2008.11.24 -
[B]SecureWeb-Gateway 6.7.6 2008.11.23 Worm.Win32.Malware.gen (suspicious)[/B]
Sophos 4.35.0 2008.11.24 -
[B]Sunbelt 3.1.1823.2 2008.11.22 VIPRE.Suspicious[/B]
Symantec 10 2008.11.24 -
TheHacker 6.3.1.1.160 2008.11.23 -
TrendMicro 8.700.0.1004 2008.11.24 -
VBA32 3.12.8.9 2008.11.23 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.23 -[/CODE]
Additional information
File size: 677888 bytes
MD5...: 2865574dfa36fe62154efe8f35ef58c8

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

File qlylib.dll received on 11.24.2008 07:30:07 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.24 -
AntiVir 7.9.0.35 2008.11.23 -
Authentium 5.1.0.4 2008.11.24 -
Avast 4.8.1281.0 2008.11.23 -
AVG 8.0.0.199 2008.11.23 -
BitDefender 7.2 2008.11.24 -
CAT-QuickHeal 10.00 2008.11.24 -
ClamAV 0.94.1 2008.11.24 -
[B]DrWeb 4.44.0.09170 2008.11.24 Trojan.Blackmailer.origin[/B]
eSafe 7.0.17.0 2008.11.23 -
eTrust-Vet 31.6.6221 2008.11.21 -
Ewido 4.0 2008.11.23 -
F-Prot 4.4.4.56 2008.11.24 -
[B]F-Secure 8.0.14332.0 2008.11.24 Trojan-Ransom.Win32.Hexzone.gfz[/B]
Fortinet 3.117.0.0 2008.11.23 -
GData 19 2008.11.24 -
Ikarus T3.1.1.45.0 2008.11.24 -
K7AntiVirus 7.10.531 2008.11.22 -
[B]Kaspersky 7.0.0.125 2008.11.24 Trojan-Ransom.Win32.Hexzone.gfz[/B]
McAfee 5443 2008.11.23 -
McAfee+Artemis 5443 2008.11.23 -
Microsoft 1.4104 2008.11.24 -
NOD32 3633 2008.11.24 -
Norman 5.80.02 2008.11.22 -
Panda 9.0.0.4 2008.11.23 -
PCTools 4.4.2.0 2008.11.23 -
Prevx1 V2 2008.11.24 -
Rising 21.05.00.00 2008.11.24 -
SecureWeb-Gateway 6.7.6 2008.11.23 -
Sophos 4.35.0 2008.11.24 -
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.24 -
TheHacker 6.3.1.1.160 2008.11.23 -
TrendMicro 8.700.0.1004 2008.11.24 -
VBA32 3.12.8.9 2008.11.23 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.23 -[/CODE]
Additional information
File size: 318976 bytes
MD5...: 1ea079abbcc15c884c25ee73f41e4b77

[size="1"][color="#666686"][B][I]Добавлено через 1 час 0 минут[/I][/B][/color][/size]

File csrcs.exe received on 11.24.2008 10:12:28 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.21.0 2008.11.24 -
[B]AntiVir 7.9.0.35 2008.11.24 TR/Autoit.FN[/B]
Authentium 5.1.0.4 2008.11.24 -
Avast 4.8.1281.0 2008.11.23 -
AVG 8.0.0.199 2008.11.23 -
BitDefender 7.2 2008.11.24 -
CAT-QuickHeal 10.00 2008.11.24 -
ClamAV 0.94.1 2008.11.24 -
[B]DrWeb 4.44.0.09170 2008.11.24 Win32.HLLW.Autoruner.3438
eSafe 7.0.17.0 2008.11.23 Suspicious File[/B]
eTrust-Vet 31.6.6225 2008.11.24 -
Ewido 4.0 2008.11.23 -
F-Prot 4.4.4.56 2008.11.24 -
[B]F-Secure 8.0.14332.0 2008.11.24 Trojan.Win32.Autoit.fn[/B]
Fortinet 3.117.0.0 2008.11.24 -
GData 19 2008.11.24 -
[B]Ikarus T3.1.1.45.0 2008.11.24 Trojan.Win32.Autoit.dt[/B]
K7AntiVirus 7.10.531 2008.11.22 -
[B]Kaspersky 7.0.0.125 2008.11.24 Trojan.Win32.Autoit.fn[/B]
McAfee 5443 2008.11.23 -
McAfee+Artemis 5443 2008.11.23 -
Microsoft 1.4104 2008.11.24 -
NOD32 3634 2008.11.24 -
[B]Norman 5.80.02 2008.11.22 W32/Agent.JIIR[/B]
Panda 9.0.0.4 2008.11.23 -
PCTools 4.4.2.0 2008.11.23 -
Prevx1 V2 2008.11.24 -
Rising 21.05.00.00 2008.11.24 -
[B]SecureWeb-Gateway 6.7.6 2008.11.24 Trojan.Autoit.FN
Sophos 4.35.0 2008.11.24 Sus/Behav-1011[/B]
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.24 -
[B]TheHacker 6.3.1.1.161 2008.11.24 Trojan/Autoit.gs[/B]
TrendMicro 8.700.0.1004 2008.11.24 -
VBA32 3.12.8.9 2008.11.23 -
ViRobot 2008.11.18.1474 2008.11.18 -
VirusBuster 4.5.11.0 2008.11.23 -[/CODE]
Additional information
File size: 420170 bytes
MD5...: 6c34e59430cbe53274744841c5edb554
25.11.2008, 12:53
Hanson

File [B]twext.exe[/B] received on 11.25.2008 07:14:53 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 14/37 (37.84%)

[QUOTE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.25 -
AntiVir 7.9.0.35 2008.11.24 -
Authentium 5.1.0.4 2008.11.24 -
[B]Avast 4.8.1281.0 2008.11.24 Win32:Rootkit-gen
AVG 8.0.0.199 2008.11.24 Agent.AMGG[/B]
BitDefender 7.2 2008.11.25 -
CAT-QuickHeal 10.00 2008.11.25 -
ClamAV 0.94.1 2008.11.25 -
DrWeb 4.44.0.09170 2008.11.24 -
[B]eSafe 7.0.17.0 2008.11.24 Suspicious File[/B]
eTrust-Vet 31.6.6226 2008.11.25 -
Ewido 4.0 2008.11.24 -
[B]F-Prot 4.4.4.56 2008.11.24 W32/DelfInject.A.gen!Eldorado
F-Secure 8.0.14332.0 2008.11.25 Trojan.Win32.Agent.anyc
Fortinet 3.117.0.0 2008.11.25 W32/Agent.ANYC!tr
GData 19 2008.11.25 Win32:Rootkit-gen
Ikarus T3.1.1.45.0 2008.11.25 Trojan.Win32.Agent[/B]
K7AntiVirus 7.10.532 2008.11.24 -
[B]Kaspersky 7.0.0.125 2008.11.25 Trojan.Win32.Agent.anyc[/B]
McAfee 5444 2008.11.24 -
[B]McAfee+Artemis 5444 2008.11.24 Generic!Artemis
Microsoft 1.4104 2008.11.25 PWS:Win32/Zbot.FAL[/B]
NOD32 3637 2008.11.24 -
[B]Norman 5.80.02 2008.11.24 W32/Agent.JILH[/B]
Panda 9.0.0.4 2008.11.24 -
PCTools 4.4.2.0 2008.11.24 -
Prevx1 V2 2008.11.25 -
[B]Rising 21.05.10.00 2008.11.25 Trojan.Win32.Agent.any[/B]
SecureWeb-Gateway 6.7.6 2008.11.24 -
Sophos 4.35.0 2008.11.25 -
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.25 -
TheHacker 6.3.1.1.162 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.25 -
[B]VBA32 3.12.8.9 2008.11.24 Trojan.Win32.Agent.anyc[/B]
ViRobot 2008.11.25.1484 2008.11.25 -
VirusBuster 4.5.11.0 2008.11.24 -[/QUOTE]
25.11.2008, 14:42
Shu_b

File dezubebo.dll received on 11.25.2008 12:10:38 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.25 -
AntiVir 7.9.0.35 2008.11.25 -
Authentium 5.1.0.4 2008.11.25 -
Avast 4.8.1281.0 2008.11.24 -
AVG 8.0.0.199 2008.11.24 -
BitDefender 7.2 2008.11.25 -
CAT-QuickHeal 10.00 2008.11.25 -
ClamAV 0.94.1 2008.11.25 -
DrWeb 4.44.0.09170 2008.11.25 -
[B]eSafe 7.0.17.0 2008.11.24 Suspicious File[/B]
eTrust-Vet 31.6.6227 2008.11.25 -
Ewido 4.0 2008.11.24 -
F-Prot 4.4.4.56 2008.11.24 -
F-Secure 8.0.14332.0 2008.11.25 -
Fortinet 3.117.0.0 2008.11.25 -
GData 19 2008.11.25 -
Ikarus T3.1.1.45.0 2008.11.25 -
K7AntiVirus 7.10.532 2008.11.24 -
Kaspersky 7.0.0.125 2008.11.25 -
McAfee 5444 2008.11.24 -
McAfee+Artemis 5444 2008.11.24 -
Microsoft 1.4104 2008.11.25 -
Norman 5.80.02 2008.11.25 -
[B]Panda 9.0.0.4 2008.11.24 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.24 -
[B]Prevx1 V2 2008.11.25 Malicious Software
Rising 21.05.12.00 2008.11.25 Trojan.Win32.VUNDO.bug
SecureWeb-Gateway 6.7.6 2008.11.25 Win32.Malware.gen!92 (suspicious)
Sophos 4.35.0 2008.11.25 Troj/Virtum-Gen[/B]
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.25 -
TheHacker 6.3.1.1.162 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.25 -
VBA32 3.12.8.9 2008.11.24 -
ViRobot 2008.11.25.1485 2008.11.25 -
VirusBuster 4.5.11.0 2008.11.24 -[/CODE]
Additional information
File size: 93238 bytes
MD5...: 61607392528b27274c81bbaacfc10f50

[size="1"][color="#666686"][B][I]Добавлено через 2 минуты[/I][/B][/color][/size]

File junefare.dll vakumene.dll vebimayo.dll received on 11.25.2008 12:10:23 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.25 -
AntiVir 7.9.0.35 2008.11.25 -
Authentium 5.1.0.4 2008.11.25 -
Avast 4.8.1281.0 2008.11.24 -
AVG 8.0.0.199 2008.11.24 -
BitDefender 7.2 2008.11.25 -
CAT-QuickHeal 10.00 2008.11.25 -
ClamAV 0.94.1 2008.11.25 -
DrWeb 4.44.0.09170 2008.11.25 -
[B]eSafe 7.0.17.0 2008.11.24 Suspicious File[/B]
eTrust-Vet 31.6.6227 2008.11.25 -
Ewido 4.0 2008.11.24 -
F-Prot 4.4.4.56 2008.11.24 -
F-Secure 8.0.14332.0 2008.11.25 -
Fortinet 3.117.0.0 2008.11.25 -
GData 19 2008.11.25 -
Ikarus T3.1.1.45.0 2008.11.25 -
K7AntiVirus 7.10.532 2008.11.24 -
Kaspersky 7.0.0.125 2008.11.25 -
McAfee 5444 2008.11.24 -
McAfee+Artemis 5444 2008.11.24 -
[B]Microsoft 1.4104 2008.11.25 TrojanDownloader:Win32/Agent.F
NOD32 3638 2008.11.25 a variant of Win32/Adware.Virtumonde.NDI
[/B]Norman 5.80.02 2008.11.25 -
Panda 9.0.0.4 2008.11.24 -
PCTools 4.4.2.0 2008.11.24 -
Prevx1 V2 2008.11.25 -
[B]Rising 21.05.12.00 2008.11.25 Trojan.Win32.VUNDO.btg
SecureWeb-Gateway 6.7.6 2008.11.25 Win32.Malware.gen!92 (suspicious)
[/B]Sophos 4.35.0 2008.11.25 -
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.25 -
TheHacker 6.3.1.1.162 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.25 -
VBA32 3.12.8.9 2008.11.24 -
ViRobot 2008.11.25.1485 2008.11.25 -
VirusBuster 4.5.11.0 2008.11.24 -[/CODE]
Additional information
File size: 59444 bytes
MD5...: 2c96bf8d899b877939ea04f2f750d449
SHA1..: 10fe62be640628edb4ac661902213bb0cde922be

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

File winsys2.exe received on 11.25.2008 12:18:26 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.25 -
AntiVir 7.9.0.35 2008.11.25 -
Authentium 5.1.0.4 2008.11.25 -
Avast 4.8.1281.0 2008.11.24 -
AVG 8.0.0.199 2008.11.24 -
BitDefender 7.2 2008.11.25 -
CAT-QuickHeal 10.00 2008.11.25 -
ClamAV 0.94.1 2008.11.25 -
DrWeb 4.44.0.09170 2008.11.25 -
eSafe 7.0.17.0 2008.11.24 -
eTrust-Vet 31.6.6227 2008.11.25 -
Ewido 4.0 2008.11.24 -
F-Prot 4.4.4.56 2008.11.24 -
F-Secure 8.0.14332.0 2008.11.25 -
Fortinet 3.117.0.0 2008.11.25 -
GData 19 2008.11.25 -
Ikarus T3.1.1.45.0 2008.11.25 -
[B]K7AntiVirus 7.10.532 2008.11.24 Trojan.Win32.Malware.1[/B]
Kaspersky 7.0.0.125 2008.11.25 -
McAfee 5444 2008.11.24 -
McAfee+Artemis 5444 2008.11.24 -
Microsoft 1.4104 2008.11.25 -
NOD32 3638 2008.11.25 -
Norman 5.80.02 2008.11.25 -
[B]Panda 9.0.0.4 2008.11.24 Trj/Agent.ISR[/B]
PCTools 4.4.2.0 2008.11.24 -
Prevx1 V2 2008.11.25 -
Rising 21.05.12.00 2008.11.25 -
SecureWeb-Gateway 6.7.6 2008.11.25 -
Sophos 4.35.0 2008.11.25 -
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.25 -
TheHacker 6.3.1.1.162 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.25 -
VBA32 None 2008.11.24 -
ViRobot 2008.11.25.1485 2008.11.25 -
VirusBuster 4.5.11.0 2008.11.24 -[/CODE]
Additional information
File size: 208896 bytes
MD5...: daee383586db76671c43a83c04e51283

[size="1"][color="#666686"][B][I]Добавлено через 2 минуты[/I][/B][/color][/size]

File kdsqm.exe received on 11.25.2008 12:17:28 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.25 -
AntiVir 7.9.0.35 2008.11.25 -
[B]Authentium 5.1.0.4 2008.11.25 W32/Sinowal-based!Maximus
Avast 4.8.1281.0 2008.11.24 Win32:FaDrop[/B]
AVG 8.0.0.199 2008.11.24 -
BitDefender 7.2 2008.11.25 -
[B]CAT-QuickHeal 10.00 2008.11.25 (Suspicious) - DNAScan[/B]
ClamAV 0.94.1 2008.11.25 -
DrWeb 4.44.0.09170 2008.11.25 -
[B]eSafe 7.0.17.0 2008.11.24 Suspicious File[/B]
eTrust-Vet 31.6.6227 2008.11.25 -
Ewido 4.0 2008.11.24 -
[B]F-Prot 4.4.4.56 2008.11.24 W32/Sinowal-based!Maximus
F-Secure 8.0.14332.0 2008.11.25 Suspicious:W32/Malware!Gemini[/B]
Fortinet 3.117.0.0 2008.11.25 -
[B]GData 19 2008.11.25 Win32:FaDrop
Ikarus T3.1.1.45.0 2008.11.25 Trojan.Win32.Alureon[/B]
K7AntiVirus 7.10.532 2008.11.24 -
Kaspersky 7.0.0.125 2008.11.25 -
McAfee 5444 2008.11.24 -
[B]McAfee+Artemis 5444 2008.11.24 Generic!Artemis
Microsoft 1.4104 2008.11.25 Trojan:Win32/Alureon.gen
NOD32 3638 2008.11.25 a variant of Win32/Kryptik.BT[/B]
Norman 5.80.02 2008.11.25 -
Panda 9.0.0.4 2008.11.24 -
PCTools 4.4.2.0 2008.11.24 -
Prevx1 V2 2008.11.25 -
Rising 21.05.12.00 2008.11.25 -
SecureWeb-Gateway 6.7.6 2008.11.25 -
Sophos 4.35.0 2008.11.25 -
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.25 -
TheHacker 6.3.1.1.162 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.25 -
VBA32 3.12.8.9 2008.11.24 -
ViRobot 2008.11.25.1485 2008.11.25 -
VirusBuster 4.5.11.0 2008.11.24 -[/CODE]
Additional information
File size: 75264 bytes
MD5...: 2401ac0314d0dfbbae8b74eae98e1b3f

[size="1"][color="#666686"][B][I]Добавлено через 11 минут[/I][/B][/color][/size]

File bodozanu.dll received on 11.25.2008 12:38:52 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.25 -
AntiVir 7.9.0.35 2008.11.25 -
Authentium 5.1.0.4 2008.11.25 -
[B]Avast 4.8.1281.0 2008.11.24 Win32:Trojan-gen {Other}
AVG 8.0.0.199 2008.11.24 Generic11.BERB
BitDefender 7.2 2008.11.25 Trojan.Vundo.FSY[/B]
CAT-QuickHeal 10.00 2008.11.25 -
[B]ClamAV 0.94.1 2008.11.25 Trojan.Spy-55283
DrWeb 4.44.0.09170 2008.11.25 Trojan.Virtumod.585
eSafe 7.0.17.0 2008.11.24 Suspicious File[/B]
eTrust-Vet 31.6.6227 2008.11.25 -
Ewido 4.0 2008.11.25 -
[B]F-Prot 4.4.4.56 2008.11.24 W32/Virtumonde.AG.gen!Eldorado[/B]
F-Secure 8.0.14332.0 2008.11.25 -
Fortinet 3.117.0.0 2008.11.25 -
[B]GData 19 2008.11.25 Trojan.Vundo.FSY
Ikarus T3.1.1.45.0 2008.11.25 Trojan.Vundo.FSY
K7AntiVirus 7.10.532 2008.11.24 Trojan.Win32.Malware.1[/B]
Kaspersky 7.0.0.125 2008.11.25 -
McAfee 5444 2008.11.24 -
McAfee+Artemis 5444 2008.11.24 -
[B]Microsoft 1.4104 2008.11.25 Trojan:Win32/Vundo.KAM
NOD32 3638 2008.11.25 a variant of Win32/Adware.Virtumonde.NCG
Norman 5.80.02 2008.11.25 W32/Virtumonde.ABGK[/B]
Panda 9.0.0.4 2008.11.24 -
PCTools 4.4.2.0 2008.11.24 -
Prevx1 V2 2008.11.25 -
[B]Rising 21.05.12.00 2008.11.25 Trojan.Win32.Undef.rjb
SecureWeb-Gateway 6.7.6 2008.11.25 Win32.Malware.gen!92 (suspicious)
Sophos 4.35.0 2008.11.25 Troj/BHO-HG[/B]
Sunbelt 3.1.1823.2 2008.11.22 -
[B]Symantec 10 2008.11.25 Trojan.Vundo[/B]
TheHacker 6.3.1.1.162 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.25 -
VBA32 3.12.8.9 2008.11.24 -
[B]ViRobot 2008.11.25.1485 2008.11.25 Trojan.Win32.PSWIGames.59392.I[/B]
VirusBuster 4.5.11.0 2008.11.24 -[/CODE]
Additional information
File size: 59392 bytes
25.11.2008, 18:38
senyak

Файл fun_21243 получен 2008.11.25 16:33:08 (CET)
Текущий статус: закончено
Результат: 5/37 (13.52%)

[QUOTE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.24.3 2008.11.25 -
AntiVir 7.9.0.35 2008.11.25 -
Authentium 5.1.0.4 2008.11.25 -
Avast 4.8.1281.0 2008.11.24 -
[B]AVG 8.0.0.199 2008.11.25 Crypt.AUA[/B]
BitDefender 7.2 2008.11.25 -
CAT-QuickHeal 10.00 2008.11.25 -
ClamAV 0.94.1 2008.11.25 -
[B]DrWeb 4.44.0.09170 2008.11.25 Trojan.MulDrop.24733[/B]
eSafe 7.0.17.0 2008.11.25 -
eTrust-Vet 31.6.6227 2008.11.25 -
Ewido 4.0 2008.11.25 -
F-Prot 4.4.4.56 2008.11.24 -
[B]F-Secure 8.0.14332.0 2008.11.25 Trojan.Win32.VB.gzk[/B]
Fortinet 3.117.0.0 2008.11.25 -
GData 19 2008.11.25 -
Ikarus T3.1.1.45.0 2008.11.25 -
K7AntiVirus 7.10.532 2008.11.24 -
[B]Kaspersky 7.0.0.125 2008.11.25 Trojan.Win32.VB.gzk[/B]
McAfee 5444 2008.11.24 -
McAfee+Artemis 5444 2008.11.24 -
Microsoft 1.4104 2008.11.25 -
NOD32 3638 2008.11.25 -
Norman 5.80.02 2008.11.25 -
[B]Panda 9.0.0.4 2008.11.25 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.25 -
Prevx1 V2 2008.11.25 -
Rising 21.05.12.00 2008.11.25 -
SecureWeb-Gateway 6.7.6 2008.11.25 -
Sophos 4.35.0 2008.11.25 -
Sunbelt 3.1.1823.2 2008.11.22 -
Symantec 10 2008.11.25 -
TheHacker 6.3.1.1.162 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.25 -
VBA32 3.12.8.9 2008.11.24 -
ViRobot 2008.11.25.1485 2008.11.25 -
VirusBuster 4.5.11.0 2008.11.24 -[/QUOTE]

Дополнительная информация
File size: 77824 bytes
MD5...: 42c1ae4d7b30882c6ba0bddb7b3f44f3
SHA1..: b18e5f4e85faba16c556f79a55c7765f5406fbaa
SHA256: 9869cc465979cf5ea529443d647ad56880ca8cce715f8b5bd75943e5d56dbf78
SHA512: 040544eb767f3520c21c75a9e151fef389ff5f169295fdec425fb8ef07e35e11
f54c01a54f63bac82fe46a7dd4e092db5524a871fc9ae29ae95039ed46fc33a0
ssdeep: 1536:tbDP3wktXejTL6b4VWL5hU9QMpqrB3RatglP+fDcValMnd:tX3wktujTLkY
WLjKJpaB3ItglgwVaKd
PEiD..: -
26.11.2008, 15:45
Shu_b

File adsl.exe received on 11.26.2008 08:15:16 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.26 Win-Trojan/Avkiller.17920
AntiVir 7.9.0.35 2008.11.26 -
Authentium 5.1.0.4 2008.11.25 -
Avast 4.8.1281.0 2008.11.25 -
AVG 8.0.0.199 2008.11.25 -
BitDefender 7.2 2008.11.26 -
CAT-QuickHeal 10.00 2008.11.26 -
ClamAV 0.94.1 2008.11.26 -
[B]DrWeb 4.44.0.09170 2008.11.26 MULDROP.Trojan
eSafe 7.0.17.0 2008.11.25 Suspicious File[/B]
eTrust-Vet 31.6.6228 2008.11.26 -
Ewido 4.0 2008.11.25 -
F-Prot 4.4.4.56 2008.11.25 -
[B]F-Secure 8.0.14332.0 2008.11.26 Suspicious:W32/Malware!Gemini[/B]
Fortinet 3.117.0.0 2008.11.25 -
GData 19 2008.11.26 -
[B]Ikarus T3.1.1.45.0 2008.11.26 Trojan.Win32.KillAV.ko[/B]
K7AntiVirus 7.10.533 2008.11.25 -
Kaspersky 7.0.0.125 2008.11.26 -
McAfee 5445 2008.11.25 -
McAfee+Artemis 5445 2008.11.25 -
Microsoft 1.4104 2008.11.26 -
NOD32 3641 2008.11.26 -
Norman 5.80.02 2008.11.25 -
[B]Panda 9.0.0.4 2008.11.25 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.25 -
Prevx1 V2 2008.11.26 -
Rising 21.05.12.00 2008.11.25 -
SecureWeb-Gateway 6.7.6 2008.11.25 -
Sophos 4.35.0 2008.11.25 -
Sunbelt 3.1.1830.2 2008.11.26 -
Symantec 10 2008.11.26 -
TheHacker 6.3.1.1.163 2008.11.25 -
[B]TrendMicro 8.700.0.1004 2008.11.26 PAK_Generic.001
VBA32 3.12.8.9 2008.11.26 Trojan.Win32.KillAV.ko[/B]
ViRobot 2008.11.26.1486 2008.11.26 -
VirusBuster 4.5.11.0 2008.11.25 -[/CODE]
Additional information
File size: 10240 bytes
MD5...: bab9b4a25a879bd14909df4b21bcda48

[size="1"][color="#666686"][B][I]Добавлено через 2 часа 56 минут[/I][/B][/color][/size]

File lsass.exe received on 11.26.2008 11:09:13 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.24.3 2008.11.26 -
AntiVir 7.9.0.35 2008.11.26 -
Authentium 5.1.0.4 2008.11.26 -
Avast 4.8.1281.0 2008.11.25 -
AVG 8.0.0.199 2008.11.25 -
BitDefender 7.2 2008.11.26 -
CAT-QuickHeal 10.00 2008.11.26 -
ClamAV 0.94.1 2008.11.26 -
DrWeb 4.44.0.09170 2008.11.26 -
[B]eSafe 7.0.17.0 2008.11.25 Suspicious File[/B]
eTrust-Vet 31.6.6228 2008.11.26 -
Ewido 4.0 2008.11.25 -
F-Prot 4.4.4.56 2008.11.25 -
F-Secure 8.0.14332.0 2008.11.26 -
Fortinet 3.117.0.0 2008.11.26 -
GData 19 2008.11.26 -
[B]Ikarus T3.1.1.45.0 2008.11.26 Trojan.Win32.Autoit.dt[/B]
K7AntiVirus 7.10.533 2008.11.25 -
Kaspersky 7.0.0.125 2008.11.26 -
McAfee 5445 2008.11.25 -
McAfee+Artemis 5445 2008.11.25 -
Microsoft 1.4104 2008.11.26 -
NOD32 3641 2008.11.26 -
[B]Norman 5.80.02 2008.11.25 W32/Agent.JIIR
Panda 9.0.0.4 2008.11.25 W32/Autoit.AB[/B]
PCTools 4.4.2.0 2008.11.25 -
Prevx1 V2 2008.11.26 -
Rising 21.05.20.00 2008.11.26 -
SecureWeb-Gateway 6.7.6 2008.11.26 -
[B]Sophos 4.35.0 2008.11.26 Sus/Behav-1011[/B]
Sunbelt 3.1.1830.2 2008.11.26 -
Symantec 10 2008.11.26 -
TheHacker 6.3.1.1.163 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.26 -
VBA32 3.12.8.9 2008.11.26 -
ViRobot 2008.11.26.1486 2008.11.26 -
VirusBuster 4.5.11.0 2008.11.25 -[/CODE]
Additional information
File size: 249172 bytes
MD5...: 0a19525f0fdae4376a586f77bf5fcb4d

[size="1"][color="#666686"][B][I]Добавлено через 2 часа 29 минут[/I][/B][/color][/size]

File vmi386.sys received on 11.26.2008 13:36:01 (CET)
[CODE]Antivirus Version Last Update Result
[B]AhnLab-V3 2008.11.24.3 2008.11.26 Win-Trojan/Pakes.26784[/B]
AntiVir 7.9.0.35 2008.11.26 -
Authentium 5.1.0.4 2008.11.26 -
[B]Avast 4.8.1281.0 2008.11.25 Win32:Trojan-gen {Other}
AVG 8.0.0.199 2008.11.26 Generic12.HRL[/B]
BitDefender 7.2 2008.11.26 -
CAT-QuickHeal 10.00 2008.11.26 -
ClamAV 0.94.1 2008.11.26 -
[B]DrWeb 4.44.0.09170 2008.11.26 Trojan.Packed.1228[/B]
eSafe 7.0.17.0 2008.11.25 -
eTrust-Vet 31.6.6228 2008.11.26 -
Ewido 4.0 2008.11.26 -
F-Prot 4.4.4.56 2008.11.25 -
F-Secure 8.0.14332.0 2008.11.26 -
Fortinet 3.117.0.0 2008.11.26 -
[B]GData 19 2008.11.26 Win32:Trojan-gen {Other}[/B]
Ikarus T3.1.1.45.0 2008.11.26 -
[B]K7AntiVirus 7.10.533 2008.11.25 Trojan.Win32.Malware.1[/B]
Kaspersky 7.0.0.125 2008.11.26 -
McAfee 5445 2008.11.25 -
[B]McAfee+Artemis 5445 2008.11.25 Generic!Artemis[/B]
Microsoft 1.4104 2008.11.26 -
[B]NOD32 3642 2008.11.26 Win32/Agent.AMBG[/B]
Norman 5.80.02 2008.11.26 -
Panda 9.0.0.4 2008.11.25 -
PCTools 4.4.2.0 2008.11.26 -
Prevx1 V2 2008.11.26 -
Rising 21.05.22.00 2008.11.26 -
SecureWeb-Gateway 6.7.6 2008.11.26 -
Sophos 4.35.0 2008.11.26 -
Sunbelt 3.1.1830.2 2008.11.26 -
[B]Symantec 10 2008.11.26 Trojan.Dropper[/B]
TheHacker 6.3.1.1.163 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.26 -
VBA32 3.12.8.9 2008.11.26 -
[B]ViRobot 2008.11.26.1487 2008.11.26 Trojan.Win32.Pakes.26784[/B]
VirusBuster 4.5.11.0 2008.11.25 -[/CODE]
Additional information
File size: 26784 bytes
MD5...: 3006e4d347c5bb5767dab0a99ddeb68f
26.11.2008, 16:11
Hanson

Файл [B]winlogon_exe_[/B] получен 2008.11.26 13:56:09 (CET)
Текущий статус: Загрузка ... в очереди ожидание проверка закончено НЕ НАЙДЕНО ОСТАНОВЛЕНО
Результат: 9/37 (24.33%)
[QUOTE]Антивирус Версия Обновление Результат
AhnLab-V3 2008.11.24.3 2008.11.26 -
[B]AntiVir 7.9.0.35 2008.11.26 DR/Delphi.Gen[/B]
Authentium 5.1.0.4 2008.11.26 -
[B]Avast 4.8.1281.0 2008.11.26 Win32:Delf-LMN
AVG 8.0.0.199 2008.11.26 SHeur2.DTA
BitDefender 7.2 2008.11.26 Trojan.Dropper.LdPinch.AO[/B]
CAT-QuickHeal 10.00 2008.11.26 -
ClamAV 0.94.1 2008.11.26 -
DrWeb 4.44.0.09170 2008.11.26 -
[B]eSafe 7.0.17.0 2008.11.25 Suspicious File[/B]
eTrust-Vet 31.6.6228 2008.11.26 -
Ewido 4.0 2008.11.26 -
F-Prot 4.4.4.56 2008.11.25 -
F-Secure 8.0.14332.0 2008.11.26 -
Fortinet 3.117.0.0 2008.11.26 -
[B]GData 19 2008.11.26 Trojan.Dropper.LdPinch.AO
Ikarus T3.1.1.45.0 2008.11.26 Trojan-Dropper.LdPinch[/B]
K7AntiVirus 7.10.533 2008.11.25 -
Kaspersky 7.0.0.125 2008.11.26 -
McAfee 5445 2008.11.25 -
[B]McAfee+Artemis 5445 2008.11.25 Generic!Artemis[/B]
Microsoft 1.4104 2008.11.26 -
NOD32 3642 2008.11.26 -
Norman 5.80.02 2008.11.26 -
Panda 9.0.0.4 2008.11.25 -
PCTools 4.4.2.0 2008.11.26 -
Prevx1 V2 2008.11.26 -
Rising 21.05.22.00 2008.11.26 -
[B]SecureWeb-Gateway 6.7.6 2008.11.26 Trojan.ATRAPS.Gen[/B]
Sophos 4.35.0 2008.11.26 -
Sunbelt 3.1.1830.2 2008.11.26 -
Symantec 10 2008.11.26 -
TheHacker 6.3.1.1.163 2008.11.25 -
TrendMicro 8.700.0.1004 2008.11.26 -
VBA32 3.12.8.9 2008.11.26 -
ViRobot 2008.11.26.1487 2008.11.26 -
VirusBuster 4.5.11.0 2008.11.25 -[/QUOTE]
27.11.2008, 17:50
Shu_b

File icq5e.dll received on 11.27.2008 07:40:25 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.27.1 2008.11.27 -
AntiVir 7.9.0.35 2008.11.26 -
Authentium 5.1.0.4 2008.11.27 -
Avast 4.8.1281.0 2008.11.27 -
AVG 8.0.0.199 2008.11.27 -
BitDefender 7.2 2008.11.27 -
CAT-QuickHeal 10.00 2008.11.27 -
ClamAV 0.94.1 2008.11.27 -
DrWeb 4.44.0.09170 2008.11.27 -
eSafe 7.0.17.0 2008.11.25 -
eTrust-Vet 31.6.6231 2008.11.27 -
Ewido 4.0 2008.11.26 -
F-Prot 4.4.4.56 2008.11.26 -
[B]F-Secure 8.0.14332.0 2008.11.27 Trojan-Downloader.Win32.Agent.arut[/B]
Fortinet 3.117.0.0 2008.11.27 -
GData 19 2008.11.27 -
Ikarus T3.1.1.45.0 2008.11.27 -
K7AntiVirus 7.10.534 2008.11.26 -
[B]Kaspersky 7.0.0.125 2008.11.27 Trojan-Downloader.Win32.Agent.arut[/B]
McAfee 5446 2008.11.26 -
McAfee+Artemis 5446 2008.11.26 -
Microsoft 1.4104 2008.11.27 -
NOD32 3644 2008.11.26 -
Norman 5.80.02 2008.11.26 -
[B]Panda 9.0.0.4 2008.11.27 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.26 -
Prevx1 V2 2008.11.27 -
Rising 21.05.30.00 2008.11.27 -
SecureWeb-Gateway 6.7.6 2008.11.26 -
Sophos 4.35.0 2008.11.27 -
Sunbelt 3.1.1830.2 2008.11.26 -
Symantec 10 2008.11.27 -
TheHacker 6.3.1.1.164 2008.11.27 -
TrendMicro 8.700.0.1004 2008.11.27 -
VBA32 3.12.8.9 2008.11.26 -
ViRobot 2008.11.27.1488 2008.11.27 -
VirusBuster 4.5.11.0 2008.11.26 -[/CODE]
Additional information
File size: 110592 bytes
MD5...: 0ab70f09b36cd6c329f68f3ff06ec5d5

[size="1"][color="#666686"][B][I]Добавлено через 7 часов 53 минуты[/I][/B][/color][/size]

[cut] -false alarm

[size="1"][color="#666686"][B][I]Добавлено через 1 минуту[/I][/B][/color][/size]

File msvcrt48.dll received on 11.27.2008 15:37:38 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.27.4 2008.11.27 -
AntiVir 7.9.0.35 2008.11.27 -
Authentium 5.1.0.4 2008.11.27 -
Avast 4.8.1281.0 2008.11.27 -
[B]AVG 8.0.0.199 2008.11.27 PSW.Agent.WGY[/B]
BitDefender 7.2 2008.11.27 -
CAT-QuickHeal 10.00 2008.11.27 -
ClamAV 0.94.1 2008.11.27 -
[B]DrWeb 4.44.0.09170 2008.11.27 Trojan.PWS.Webmonier.115[/B]
eSafe 7.0.17.0 2008.11.27 -
eTrust-Vet 31.6.6233 2008.11.27 -
Ewido 4.0 2008.11.27 -
F-Prot 4.4.4.56 2008.11.27 -
[B]F-Secure 8.0.14332.0 2008.11.27 Trojan-Spy.Win32.Agent.eyl
Fortinet 3.117.0.0 2008.11.27 Spy/Agent[/B]
GData 19 2008.11.27 -
Ikarus T3.1.1.45.0 2008.11.27 -
K7AntiVirus 7.10.536 2008.11.27 -
[B]Kaspersky 7.0.0.125 2008.11.27 Trojan-Spy.Win32.Agent.eyl[/B]
McAfee 5446 2008.11.26 -
McAfee+Artemis 5446 2008.11.26 -
Microsoft 1.4104 2008.11.27 -
NOD32 3645 2008.11.27 -
Norman 5.80.02 2008.11.26 -
[B]Panda 9.0.0.4 2008.11.27 Suspicious file[/B]
PCTools 4.4.2.0 2008.11.27 -
Prevx1 V2 2008.11.27 -
Rising 21.05.32.00 2008.11.27 -
SecureWeb-Gateway 6.7.6 2008.11.27 -
Sophos 4.35.0 2008.11.27 -
Sunbelt 3.1.1832.2 2008.11.27 -
Symantec 10 2008.11.27 -
TheHacker 6.3.1.1.164 2008.11.27 -
TrendMicro 8.700.0.1004 2008.11.27 -
VBA32 3.12.8.9 2008.11.27 -
ViRobot 2008.11.27.1489 2008.11.27 -
VirusBuster 4.5.11.0 2008.11.26 -[/CODE]
Additional information
File size: 20480 bytes
MD5...: 55d308f64c57e382583eb18757abd535

[size="1"][color="#666686"][B][I]Добавлено через 2 минуты[/I][/B][/color][/size]

File fskahuipymcphgo.sys received on 11.27.2008 15:39:36 (CET)
[CODE]Antivirus Version Last Update Result
AhnLab-V3 2008.11.27.4 2008.11.27 -
[B]AntiVir 7.9.0.35 2008.11.27 TR/Rootkit.Gen[/B]
Authentium 5.1.0.4 2008.11.27 -
[B]Avast 4.8.1281.0 2008.11.27 Win32:Rootkit-gen[/B]
AVG 8.0.0.199 2008.11.27 DDoS.K
BitDefender 7.2 2008.11.27 -
CAT-QuickHeal 10.00 2008.11.27 -
ClamAV 0.94.1 2008.11.27 -
DrWeb 4.44.0.09170 2008.11.27 -
eSafe 7.0.17.0 2008.11.27 -
eTrust-Vet 31.6.6233 2008.11.27 -
Ewido 4.0 2008.11.27 -
F-Prot 4.4.4.56 2008.11.27 -
F-Secure 8.0.14332.0 2008.11.27 -
Fortinet 3.117.0.0 2008.11.27 -
[B]GData 19 2008.11.27 Win32:Rootkit-gen
Ikarus T3.1.1.45.0 2008.11.27 Backdoor.WinNT.Rustock
K7AntiVirus 7.10.536 2008.11.27 Trojan.Win32.Malware.1[/B]
Kaspersky 7.0.0.125 2008.11.27 -
McAfee 5446 2008.11.26 -
[B]McAfee+Artemis 5446 2008.11.26 Generic!Artemis
Microsoft 1.4104 2008.11.27 Backdoor:WinNT/Rustock.H[/B]
NOD32 3645 2008.11.27 -
[B]Norman 5.80.02 2008.11.26 W32/Rootkit.WKA[/B]
Panda 9.0.0.4 2008.11.27 -
PCTools 4.4.2.0 2008.11.27 -
Prevx1 V2 2008.11.27 -
Rising 21.05.32.00 2008.11.27 -
[B]SecureWeb-Gateway 6.7.6 2008.11.27 Trojan.Rootkit.Gen[/B]
Sophos 4.35.0 2008.11.27 -
Sunbelt 3.1.1832.2 2008.11.27 -
Symantec 10 2008.11.27 -
TheHacker 6.3.1.1.164 2008.11.27 -
TrendMicro 8.700.0.1004 2008.11.27 -
VBA32 3.12.8.9 2008.11.27 -
ViRobot 2008.11.27.1489 2008.11.27 -
VirusBuster 4.5.11.0 2008.11.26 -[/CODE]
Additional information
File size: 30848 bytes
MD5...: b0709f0e1517f9a7bf964761c2e47493

Показывать 40 сообщений этой темы на одной странице